last executing test programs:

400.225142ms ago: executing program 0 (id=4888):
socket$alg(0x26, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
pipe(&(0x7f00000001c0))
socket(0x10, 0x3, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000006000000040000000000000e0400000000000000000000000100000d0400000004000000040000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x5a, 0x0, 0x4, 0x80000}, 0x20)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$key(0xf, 0x3, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20)

356.609365ms ago: executing program 0 (id=4891):
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0xfff2, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}}, 0x20040040)

238.480335ms ago: executing program 1 (id=4895):
socket$inet6_udplite(0xa, 0x2, 0x88)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000600)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
writev(r2, &(0x7f0000000d00)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988fb", 0xe}, {&(0x7f0000000740)="23020000e3ff", 0x6}], 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000000)
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ea2899cf", @ANYRES16=r1, @ANYBLOB="08002dbd7000fbdbdf253e0000000c0099000500000021000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x7ffffffe}, 0x8}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000006000000010001002816b3c94cd2e2cf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa0000000009000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x24}, 0x94)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})

238.154741ms ago: executing program 2 (id=4896):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x3}, 0x8)
close(r0)

237.03971ms ago: executing program 0 (id=4897):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x2}, @IFLA_GRE_IGNORE_DF={0x5}]}}}]}, 0x40}}, 0x0)

193.064296ms ago: executing program 0 (id=4898):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x34, r2, 0x5, 0x4000, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac06, 0xfac09, 0xfac02]}]]}, 0x34}}, 0x0)

192.799755ms ago: executing program 2 (id=4899):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x8000)

174.804695ms ago: executing program 1 (id=4900):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f00000004c0)=0x2)

174.253205ms ago: executing program 0 (id=4901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r4)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7fff, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80003, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

120.646218ms ago: executing program 2 (id=4902):
syz_emit_ethernet(0x8a, &(0x7f0000000440)={@broadcast, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x4c, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0xfc}, @mcast2, {[@fragment={0x87, 0x0, 0x8, 0x0, 0x0, 0x0, 0x600}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}}}}}}}, 0x0)

120.364351ms ago: executing program 1 (id=4903):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000031401002bbd7000fcdbdf250900020073797ae730"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)

59.984177ms ago: executing program 1 (id=4904):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @random="9df67c4ced4c"}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x5c}}, 0x56)

59.731941ms ago: executing program 2 (id=4905):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50)

59.52969ms ago: executing program 1 (id=4906):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f000000bf40)=@deltfilter={0xc4, 0x2d, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x10}, {0x90eaf0829c110e4b, 0x2}, {0x10, 0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0x94, 0x2, [@TCA_BASIC_ACT={0x90, 0x3, [@m_ctinfo={0x8c, 0x1782, 0x0, 0x0, {{0xb}, {0x4}, {0x5d, 0x6, "949c617ed004332ff45af9f3c360ed61b661dc95bd22773b18752862e30778c60081fcedc752c3b34655b07ca00684ffd5bbb37de2af356d565a4469a15da8bd04629c6c8630a1803a2e7064fdcc07aa881d63f27108926449"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000)

59.335013ms ago: executing program 2 (id=4907):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa)

412.113µs ago: executing program 1 (id=4908):
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
socket$pptp(0x18, 0x1, 0x2)
socket$pptp(0x18, 0x1, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
r2 = getpid()
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x40000)
sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x69}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4040000)

173.918µs ago: executing program 0 (id=4909):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48)
mmap(&(0x7f0000b02000/0x3000)=nil, 0x3000, 0x1000002, 0x28011, r2, 0x3000)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x24}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0x2, 0xd, 0x8, 0x20, 0x8}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0xe9, &(0x7f0000000500)=""/233, 0x100, 0x2c, '\x00', r1, 0x17, r0, 0x8, &(0x7f0000000600)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2e3db, r0, 0x4, 0x0, &(0x7f0000000800)=[{0x4, 0x2, 0x4, 0xb}, {0x5, 0x3, 0xe, 0x5}, {0x5, 0x1, 0x5, 0xb}, {0x3, 0x2, 0x2, 0x5}], 0x10, 0xd}, 0x94)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010102}}}, @ip_retopts={{0x14, 0x110, 0xb, {[@timestamp_addr={0x44, 0x4, 0x7b, 0x1, 0x9}]}}}], 0x38}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x1d, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb7f0200", 0x0, 0x104, 0x6000000000000000, 0xc9, 0x120, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688", &(0x7f00000006c0)="15690ddccc3e7e3c5b9cf1a0a6fc26121be73bf5d75102c65cb813b75488f9f6e4e9aa41f6dd3e0ec98652f09c913935a0fec4ce9cf441771a553d52c779e8c94b99fdf952d9e8a2cb7ef26ba0502c55f1a82facf45bd9c727e815e7c988a29b17458dd2de0e225dbfdc8e89322e8549c94dba5d0bed0dfdc561f4dd346a0faa9c7e2929549a2ceb2140da261067666cf578ff96865c0582d3d4d0a2691401757e4d36f6a5f15792bea9f50e2638a62b0a3883f3ca51c3b130bc45539ed48f6d630f488023c13788fbd3278b1dedd2065be35544fe737cee821f640daec32f84cab743f1882099fe04a61a5ad59590049566e275988a387252d754a8f6b45ea2956a882e56038e2502c13d12fe4955f54dafe778b7fba7ee2e18b5a9a999fe09", 0x4}, 0x50)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x5, <r4=>0x0}, 0x8)
bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000140)=r4, 0x4)
r5 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', <r6=>0x0})
r7 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket(0x1, 0x803, 0x0)
getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0)

0s ago: executing program 2 (id=4910):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff)
sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x3, 0x7, 0x0, 0x0, 0x0, {0x5, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008040)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0)

kernel console output (not intermixed with test programs):

dge0: port 2(bridge_slave_1) entered blocking state
[   53.568871][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.572797][ T5829] bridge_slave_1: entered allmulticast mode
[   53.576066][ T5829] bridge_slave_1: entered promiscuous mode
[   53.587224][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   53.640646][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.666920][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.720160][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   53.736760][ T5829] team0: Port device team_slave_0 added
[   53.754234][ T5829] team0: Port device team_slave_1 added
[   53.763138][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.765336][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.767523][ T5837] bridge_slave_0: entered allmulticast mode
[   53.770852][ T5837] bridge_slave_0: entered promiscuous mode
[   53.804177][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.806391][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.808663][ T5837] bridge_slave_1: entered allmulticast mode
[   53.811829][ T5837] bridge_slave_1: entered promiscuous mode
[   53.824434][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.826754][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.835192][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.853027][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.855594][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.865349][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.884808][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   53.911630][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.924834][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.927113][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.929287][ T5833] bridge_slave_0: entered allmulticast mode
[   53.932339][ T5833] bridge_slave_0: entered promiscuous mode
[   53.952600][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.955013][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.957298][ T5833] bridge_slave_1: entered allmulticast mode
[   53.962244][ T5833] bridge_slave_1: entered promiscuous mode
[   53.982694][ T5837] team0: Port device team_slave_0 added
[   53.986322][ T5837] team0: Port device team_slave_1 added
[   54.030451][ T5829] hsr_slave_0: entered promiscuous mode
[   54.032729][ T5829] hsr_slave_1: entered promiscuous mode
[   54.038073][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.047348][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.051610][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.054332][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.064051][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.068818][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.071732][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.080577][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.133347][ T5833] team0: Port device team_slave_0 added
[   54.150846][ T5833] team0: Port device team_slave_1 added
[   54.156171][ T5837] hsr_slave_0: entered promiscuous mode
[   54.159966][ T5837] hsr_slave_1: entered promiscuous mode
[   54.163988][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.167067][ T5837] Cannot create hsr debugfs directory
[   54.239024][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   54.241863][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.251568][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   54.266943][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   54.269626][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   54.279454][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   54.393914][ T5833] hsr_slave_0: entered promiscuous mode
[   54.396208][ T5833] hsr_slave_1: entered promiscuous mode
[   54.398430][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   54.401284][ T5833] Cannot create hsr debugfs directory
[   54.485423][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.498550][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.513964][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.532997][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.576247][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   54.591358][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   54.605274][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   54.620160][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   54.641628][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.648357][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.655588][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.664284][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.775784][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.818216][ T5829] 8021q: adding VLAN 0 to HW filter on device team0
[   54.840809][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.845619][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.848563][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.858425][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.877668][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.880018][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.893433][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   54.902827][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   54.911793][ T1086] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.914226][ T1086] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.921908][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.924023][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.931304][ T1086] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.933433][ T1086] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.942300][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.944525][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.117147][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.159265][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.172364][ T5829] veth0_vlan: entered promiscuous mode
[   55.183292][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.187238][ T5829] veth1_vlan: entered promiscuous mode
[   55.234222][ T5833] veth0_vlan: entered promiscuous mode
[   55.244526][ T5837] veth0_vlan: entered promiscuous mode
[   55.253073][ T5837] veth1_vlan: entered promiscuous mode
[   55.256348][ T5833] veth1_vlan: entered promiscuous mode
[   55.260731][ T5221] Bluetooth: hci0: command tx timeout
[   55.263544][ T5829] veth0_macvtap: entered promiscuous mode
[   55.273623][ T5829] veth1_macvtap: entered promiscuous mode
[   55.296506][ T5837] veth0_macvtap: entered promiscuous mode
[   55.305303][ T5837] veth1_macvtap: entered promiscuous mode
[   55.312429][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.316244][ T5833] veth0_macvtap: entered promiscuous mode
[   55.327495][ T5833] veth1_macvtap: entered promiscuous mode
[   55.333430][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.340039][ T5221] Bluetooth: hci2: command tx timeout
[   55.340655][   T54] Bluetooth: hci1: command tx timeout
[   55.343524][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.351552][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.356902][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.360382][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.363062][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.365655][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.373400][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.376078][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.378694][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.383596][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.388980][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   55.401561][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   55.414501][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   55.417096][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   55.420628][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   55.423598][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   55.496668][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.502759][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.529620][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.536770][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.548064][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.551959][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.584212][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.589982][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.597903][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.601119][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.624187][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   55.633311][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   55.635937][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   55.987868][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'.
[   56.036622][ T5928] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   56.355043][ T5945] netlink: 32 bytes leftover after parsing attributes in process `syz.0.22'.
[   56.511558][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   56.654601][ T5955] netlink: 16 bytes leftover after parsing attributes in process `syz.0.27'.
[   56.688280][ T5957] nbd: must specify a size in bytes for the device
[   56.769297][ T5963] netlink: 12 bytes leftover after parsing attributes in process `syz.0.31'.
[   57.250872][ T5993] syz.2.45 uses obsolete (PF_INET,SOCK_PACKET)
[   57.264402][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'.
[   57.267058][ T5996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.46'.
[   57.339994][   T54] Bluetooth: hci0: command tx timeout
[   57.423469][   T54] Bluetooth: hci1: command tx timeout
[   57.431135][   T54] Bluetooth: hci2: command tx timeout
[   57.452763][ T6013] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   57.455126][ T6013] netlink: 'syz.1.53': attribute type 2 has an invalid length.
[   57.465997][ T6013] netlink: 'syz.1.53': attribute type 1 has an invalid length.
[   57.468354][ T6013] netlink: 'syz.1.53': attribute type 2 has an invalid length.
[   57.602139][ T6025] netlink: 'syz.0.58': attribute type 9 has an invalid length.
[   57.608260][ T6025] netlink: 'syz.0.58': attribute type 6 has an invalid length.
[   58.183144][ T6042] tipc: Started in network mode
[   58.184878][ T6042] tipc: Node identity 8a4e7c2645cd, cluster identity 4711
[   58.187332][ T6042] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   58.192289][ T6042] syzkaller0: entered promiscuous mode
[   58.194144][ T6042] syzkaller0: entered allmulticast mode
[   58.201757][ T6042] Zero length message leads to an empty skb
[   58.205768][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   58.211166][ T6042] tipc: Resetting bearer <eth:syzkaller0>
[   58.240928][ T6042] tipc: Disabling bearer <eth:syzkaller0>
[   58.532512][ T6052] x_tables: ip6_tables: sctp match: only valid for protocol 132
[   58.771069][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.071269][ T6105] bond0: option all_slaves_active: invalid value (223)
[   59.205353][ T6115] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (71)
[   59.420341][   T54] Bluetooth: hci0: command tx timeout
[   59.500566][   T54] Bluetooth: hci2: command tx timeout
[   59.500605][ T5221] Bluetooth: hci1: command tx timeout
[   59.565701][ T6145] netlink: 'syz.0.110': attribute type 13 has an invalid length.
[   59.568033][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'.
[   59.716191][ T6156] netlink: 64 bytes leftover after parsing attributes in process `syz.2.115'.
[   59.751888][ T6158] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   59.898613][ T6174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.124'.
[   59.917272][ T6176] Bluetooth: MGMT ver 1.23
[   60.065688][ T6188] macsec1: entered promiscuous mode
[   60.067322][ T6188] macsec1: entered allmulticast mode
[   60.115582][ T6196] bridge0: port 3(erspan0) entered blocking state
[   60.118278][ T6196] bridge0: port 3(erspan0) entered disabled state
[   60.126925][ T6196] erspan0: entered allmulticast mode
[   60.131912][ T6196] erspan0: entered promiscuous mode
[   60.133980][ T6196] bridge0: port 3(erspan0) entered blocking state
[   60.136060][ T6196] bridge0: port 3(erspan0) entered forwarding state
[   60.146764][ T6196] erspan0: left allmulticast mode
[   60.148378][ T6196] erspan0: left promiscuous mode
[   60.151727][ T6196] bridge0: port 3(erspan0) entered disabled state
[   60.275214][ T6207] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[   60.277732][ T6207] openvswitch: netlink: Message has 8454 unknown bytes.
[   60.444262][ T6227] netlink: 'syz.0.149': attribute type 9 has an invalid length.
[   60.515377][ T6237] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615)
[   60.521543][ T6237] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535
[   60.625716][ T6244] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.641442][ T6224] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   60.969876][ T6265] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   61.145030][ T6271] __nla_validate_parse: 5 callbacks suppressed
[   61.145040][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.2.166'.
[   61.148748][ T6225] syz.1.148 (6225) used greatest stack depth: 17912 bytes left
[   61.216563][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'.
[   61.221872][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'.
[   61.357784][ T6290] netlink: 'syz.2.171': attribute type 13 has an invalid length.
[   61.361918][ T6290] netlink: 'syz.2.171': attribute type 17 has an invalid length.
[   61.418259][ T6290] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   61.429282][ T6292] tun0: tun_chr_ioctl cmd 2147767507
[   61.499901][   T54] Bluetooth: hci0: command tx timeout
[   61.579502][   T54] Bluetooth: hci2: command tx timeout
[   61.579598][ T5832] Bluetooth: hci1: command tx timeout
[   61.607725][ T6311] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.182'.
[   62.392548][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'.
[   62.425210][ T6333] netlink: zone id is out of range
[   62.428280][ T6333] netlink: zone id is out of range
[   62.634011][ T6363] Cannot find set identified by id 1 to match
[   62.835694][ T6384] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   63.567485][ T6480] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   63.574781][ T6480] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[   63.641458][ T6482] netlink: 'syz.1.230': attribute type 7 has an invalid length.
[   63.659662][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[   63.956869][ T6511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.244'.
[   64.093734][ T6522] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   64.137709][ T6525] bridge2: entered allmulticast mode
[   64.380270][ T6540] netlink: 'syz.1.257': attribute type 1 has an invalid length.
[   64.387514][ T6540] netlink: 'syz.1.257': attribute type 2 has an invalid length.
[   64.550662][ T6562] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   64.726247][ T6584] netlink: 9280 bytes leftover after parsing attributes in process `syz.2.278'.
[   64.832429][ T6599] netlink: 'syz.2.285': attribute type 1 has an invalid length.
[   64.854849][ T6599] 8021q: adding VLAN 0 to HW filter on device bond1
[   64.870037][ T6599] ipvlan2: entered allmulticast mode
[   64.871823][ T6599] bond1: entered allmulticast mode
[   64.881761][ T6599] bond1: (slave gretap1): making interface the new active one
[   64.884131][ T6599] gretap1: entered allmulticast mode
[   64.887047][ T6599] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   65.019956][ T6607] nbd0: detected capacity change from 0 to 63
[   65.025291][   T56] block nbd0: Receive control failed (result -32)
[   65.028227][ T5840] block nbd0: Send control failed (result -32)
[   65.030379][ T5840] block nbd0: Request send failed, requeueing
[   65.034143][   T60] block nbd0: Dead connection, failed to find a fallback
[   65.036316][   T60] block nbd0: shutting down sockets
[   65.038193][   T60] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.042757][   T60] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.049802][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.055326][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[   65.065446][ T5840] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.070687][ T5840] Buffer I/O error on dev nbd0, logical block 2, async page read
[   65.073398][ T5840] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.080943][ T5840] Buffer I/O error on dev nbd0, logical block 3, async page read
[   65.084109][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.087086][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.090535][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.094014][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[   65.096962][ T5840] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.101781][ T5840] Buffer I/O error on dev nbd0, logical block 2, async page read
[   65.104354][ T5840] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.107104][ T5840] Buffer I/O error on dev nbd0, logical block 3, async page read
[   65.109677][ T5840] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.119498][ T5840] Buffer I/O error on dev nbd0, logical block 0, async page read
[   65.121916][ T5840] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   65.124769][ T6615] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   65.127138][ T5840] Buffer I/O error on dev nbd0, logical block 1, async page read
[   65.134028][ T5840] ldm_validate_partition_table(): Disk read failed.
[   65.142853][ T5840] Dev nbd0: unable to read RDB block 0
[   65.145554][ T5840]  nbd0: unable to read partition table
[   65.158590][ T5840] ldm_validate_partition_table(): Disk read failed.
[   65.178605][ T5840] Dev nbd0: unable to read RDB block 0
[   65.181510][ T5840]  nbd0: unable to read partition table
[   65.605808][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.308'.
[   65.620895][ T6658] netlink: 'syz.0.308': attribute type 2 has an invalid length.
[   65.650437][ T6665] netlink: 44 bytes leftover after parsing attributes in process `syz.0.312'.
[   65.697359][ T6668] batman_adv: batadv0: Adding interface: dummy0
[   65.709450][ T6668] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   65.719977][ T6668] batman_adv: batadv0: Interface activated: dummy0
[   65.735705][ T6668] batadv0: mtu less than device minimum
[   65.738205][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.742119][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.745824][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.749515][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.753275][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.756883][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.760682][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.764398][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.768115][ T6668] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[   65.882243][ T6688] IPv6: Can't replace route, no match found
[   66.224551][ T6723] netlink: 44 bytes leftover after parsing attributes in process `syz.2.337'.
[   66.277735][ T6731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.341'.
[   66.450894][ T6749] Driver unsupported XDP return value 0 on prog  (id 45) dev N/A, expect packet loss!
[   66.585481][ T6764] netlink: 332 bytes leftover after parsing attributes in process `syz.1.356'.
[   66.588261][ T6764] netlink: 104 bytes leftover after parsing attributes in process `syz.1.356'.
[   66.594151][ T6764] netlink: 32 bytes leftover after parsing attributes in process `syz.1.356'.
[   66.630788][ T6766] pim6reg0: tun_chr_ioctl cmd 2148553947
[   66.937067][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'.
[   66.955725][ T6782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.364'.
[   67.190599][ T5221] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   67.198326][ T6787] netlink: 'syz.0.365': attribute type 13 has an invalid length.
[   67.209438][ T6787] netlink: 'syz.0.365': attribute type 17 has an invalid length.
[   67.355510][ T6800] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0
[   67.675535][ T6820] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.678506][ T6820] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.693523][ T6820] batman_adv: batadv0: Interface deactivated: dummy0
[   67.826258][ T6841] bond0: entered promiscuous mode
[   67.827832][ T6841] bond_slave_0: entered promiscuous mode
[   67.831782][ T6841] bond_slave_1: entered promiscuous mode
[   67.834917][ T6841] batadv0: entered promiscuous mode
[   67.837198][ T6841] hsr1: entered allmulticast mode
[   67.839031][ T6841] bond0: entered allmulticast mode
[   67.841580][ T6841] bond_slave_0: entered allmulticast mode
[   67.843420][ T6841] bond_slave_1: entered allmulticast mode
[   67.845137][ T6841] batadv0: entered allmulticast mode
[   67.847015][ T6841] 8021q: adding VLAN 0 to HW filter on device hsr1
[   67.851330][ T6841] bond0: left promiscuous mode
[   67.852810][ T6841] bond_slave_0: left promiscuous mode
[   67.854612][ T6841] bond_slave_1: left promiscuous mode
[   67.857133][ T6841] batadv0: left promiscuous mode
[   67.871490][ T6843] netlink: 'syz.2.391': attribute type 6 has an invalid length.
[   68.148532][ T6869] netlink: 256 bytes leftover after parsing attributes in process `syz.1.404'.
[   68.482931][ T6888] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[   68.810696][ T6919] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.426'.
[   69.111059][ T6949] netlink: 104 bytes leftover after parsing attributes in process `syz.0.436'.
[   69.538086][ T6980] GUP no longer grows the stack in syz.1.447 (6980): 200000004000-200000008000 (200000002000)
[   69.541492][ T6980] CPU: 1 UID: 0 PID: 6980 Comm: syz.1.447 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[   69.541504][ T6980] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   69.541509][ T6980] Call Trace:
[   69.541513][ T6980]  <TASK>
[   69.541529][ T6980]  dump_stack_lvl+0x189/0x250
[   69.541546][ T6980]  ? __pfx_dump_stack_lvl+0x10/0x10
[   69.541556][ T6980]  ? __pfx__printk+0x10/0x10
[   69.541565][ T6980]  ? find_vma+0xe7/0x160
[   69.541582][ T6980]  __get_user_pages+0x2a60/0x30b0
[   69.541607][ T6980]  ? __pfx___get_user_pages+0x10/0x10
[   69.541617][ T6980]  ? __gup_longterm_locked+0x309/0x15b0
[   69.541626][ T6980]  ? down_read_killable+0x1d1/0x350
[   69.541636][ T6980]  ? try_get_folio+0x633/0x660
[   69.541648][ T6980]  __gup_longterm_locked+0x3e3/0x15b0
[   69.541668][ T6980]  gup_fast_fallback+0x1cd4/0x2260
[   69.541695][ T6980]  ? __pfx_gup_fast_fallback+0x10/0x10
[   69.541725][ T6980]  ? rcu_is_watching+0x15/0xb0
[   69.541740][ T6980]  ? is_valid_gup_args+0x11f/0x200
[   69.541751][ T6980]  ? pin_user_pages_fast+0x4d/0xb0
[   69.541762][ T6980]  rds_cmsg_rdma_args+0x8f4/0x1240
[   69.541786][ T6980]  rds_cmsg_send+0x33d/0x5c0
[   69.541802][ T6980]  rds_sendmsg+0x1129/0x1f00
[   69.541824][ T6980]  ? __pfx_rds_sendmsg+0x10/0x10
[   69.541833][ T6980]  ? aa_sk_perm+0x81e/0x950
[   69.541844][ T6980]  ? __pfx_aa_sk_perm+0x10/0x10
[   69.541850][ T6980]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[   69.541864][ T6980]  ? aa_sock_msg_perm+0x94/0x160
[   69.541874][ T6980]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   69.541882][ T6980]  ? __pfx_rds_sendmsg+0x10/0x10
[   69.541893][ T6980]  __sock_sendmsg+0x21c/0x270
[   69.541904][ T6980]  ____sys_sendmsg+0x505/0x830
[   69.541918][ T6980]  ? __pfx_____sys_sendmsg+0x10/0x10
[   69.541936][ T6980]  ? import_iovec+0x74/0xa0
[   69.541949][ T6980]  ___sys_sendmsg+0x21f/0x2a0
[   69.541962][ T6980]  ? __pfx____sys_sendmsg+0x10/0x10
[   69.541990][ T6980]  ? __fget_files+0x2a/0x420
[   69.541997][ T6980]  ? __fget_files+0x3a0/0x420
[   69.542009][ T6980]  __x64_sys_sendmsg+0x19b/0x260
[   69.542022][ T6980]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   69.542038][ T6980]  ? rcu_is_watching+0x15/0xb0
[   69.542049][ T6980]  ? do_syscall_64+0xbe/0x3b0
[   69.542060][ T6980]  do_syscall_64+0xfa/0x3b0
[   69.542068][ T6980]  ? lockdep_hardirqs_on+0x9c/0x150
[   69.542076][ T6980]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.542083][ T6980]  ? exc_page_fault+0x9f/0xf0
[   69.542092][ T6980]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   69.542100][ T6980] RIP: 0033:0x7f115718e9a9
[   69.542108][ T6980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   69.542115][ T6980] RSP: 002b:00007f1157f28038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   69.542125][ T6980] RAX: ffffffffffffffda RBX: 00007f11573b6240 RCX: 00007f115718e9a9
[   69.542130][ T6980] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000009
[   69.542135][ T6980] RBP: 00007f1157210d69 R08: 0000000000000000 R09: 0000000000000000
[   69.542140][ T6980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   69.542145][ T6980] R13: 0000000000000000 R14: 00007f11573b6240 R15: 00007ffd20ead938
[   69.542158][ T6980]  </TASK>
[   70.335794][ T6993] netlink: 'syz.1.454': attribute type 16 has an invalid length.
[   70.338145][ T6993] netlink: 'syz.1.454': attribute type 3 has an invalid length.
[   70.867243][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.870305][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   71.798870][ T7116] dvmrp1: entered allmulticast mode
[   71.803512][ T7116] dvmrp1: left allmulticast mode
[   71.848162][ T7121] __nla_validate_parse: 2 callbacks suppressed
[   71.848173][ T7121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.516'.
[   72.013333][ T7122] netlink: 248 bytes leftover after parsing attributes in process `syz.0.515'.
[   72.691746][ T7180] veth0: entered promiscuous mode
[   72.701275][ T7178] veth0: left promiscuous mode
[   72.874277][ T7190] netlink: 27 bytes leftover after parsing attributes in process `syz.0.541'.
[   73.145476][ T7215] Bluetooth: hci0: Opcode 0x0c03 failed: -112
[   73.199192][ T7224] netlink: 'syz.2.550': attribute type 1 has an invalid length.
[   73.202672][ T7224] netlink: 244 bytes leftover after parsing attributes in process `syz.2.550'.
[   73.281342][ T7232] netlink: 216 bytes leftover after parsing attributes in process `syz.1.554'.
[   73.284153][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'.
[   73.286856][ T7232] netlink: 16 bytes leftover after parsing attributes in process `syz.1.554'.
[   73.433167][ T7244] netlink: 27 bytes leftover after parsing attributes in process `syz.2.559'.
[   73.575416][ T7258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.566'.
[   73.746988][ T7274] wireguard0: entered promiscuous mode
[   73.748764][ T7274] wireguard0: entered allmulticast mode
[   73.797546][ T7283] net_ratelimit: 13 callbacks suppressed
[   73.797556][ T7283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   73.824756][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'.
[   73.962963][ T7300] netlink: 'syz.2.586': attribute type 3 has an invalid length.
[   74.229126][ T7333] netlink: 'syz.0.602': attribute type 1 has an invalid length.
[   74.235089][ T7333] netlink: 'syz.0.602': attribute type 11 has an invalid length.
[   74.242136][ T7335] trusted_key: syz.1.603 sent an empty control message without MSG_MORE.
[   74.347203][ T7341] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.397463][ T7350] 8021q: adding VLAN 0 to HW filter on device batadv1
[   74.404993][ T7350] team0: Failed to send port change of device batadv1 via netlink (err -105)
[   74.407845][ T7350] team0: Failed to send options change via netlink (err -105)
[   74.411752][ T7350] team0: Port device batadv1 added
[   74.431901][ T7341] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.473385][ T7341] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.520933][ T7341] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.594127][ T7341] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.604619][ T7341] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.619568][ T7341] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.633136][ T7341] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.181075][ T5221] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.314131][ T7430] ip6gre1: entered allmulticast mode
[   75.340738][ T7434] netlink: 'syz.1.650': attribute type 11 has an invalid length.
[   75.482453][   T33] audit: type=1804 audit(1753188762.652:2): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.659" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1132 res=1 errno=0
[   75.505109][   T33] audit: type=1800 audit(1753188762.652:3): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.659" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=1132 res=0 errno=0
[   75.704054][ T7476] netlink: 'syz.0.671': attribute type 21 has an invalid length.
[   75.732261][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state
[   75.735027][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.402566][ T7539] tipc: New replicast peer: 255.255.255.255
[   76.404705][ T7539] tipc: Enabled bearer <udp:syz2>, priority 10
[   76.412221][ T7539] tipc: Disabling bearer <udp:syz2>
[   76.627390][ T7556] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   76.692521][ T7562] syzkaller1: entered promiscuous mode
[   76.694217][ T7562] syzkaller1: entered allmulticast mode
[   76.863209][ T7577] 8021q: adding VLAN 0 to HW filter on device bond1
[   76.865647][ T7577] bridge0: port 3(bond1) entered blocking state
[   76.875455][ T7577] bridge0: port 3(bond1) entered disabled state
[   76.877480][ T7577] bond1: entered allmulticast mode
[   76.881566][ T7577] bond1: entered promiscuous mode
[   76.886428][ T7577] bridge0: port 3(bond1) entered blocking state
[   76.888377][ T7577] bridge0: port 3(bond1) entered forwarding state
[   76.905423][ T7577] __nla_validate_parse: 15 callbacks suppressed
[   76.905433][ T7577] netlink: 20 bytes leftover after parsing attributes in process `syz.0.711'.
[   76.916376][ T7577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.711'.
[   76.941601][ T7577] dummy0: entered promiscuous mode
[   76.948965][ T7577] team0: entered promiscuous mode
[   76.955230][ T7577] team_slave_0: entered promiscuous mode
[   76.957315][ T7577] team_slave_1: entered promiscuous mode
[   76.966224][ T7577] bridge0: port 4(hsr1) entered blocking state
[   76.968212][ T7577] bridge0: port 4(hsr1) entered disabled state
[   76.971941][ T7577] hsr1: entered allmulticast mode
[   76.973552][ T7577] dummy0: entered allmulticast mode
[   76.975119][ T7577] team0: entered allmulticast mode
[   76.976765][ T7577] team_slave_0: entered allmulticast mode
[   76.979552][ T7577] team_slave_1: entered allmulticast mode
[   76.982547][ T7577] hsr1: entered promiscuous mode
[   76.984392][ T7577] bridge0: port 4(hsr1) entered blocking state
[   76.986353][ T7577] bridge0: port 4(hsr1) entered forwarding state
[   77.010947][ T6453] bridge0: port 3(bond1) entered disabled state
[   77.016271][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[   77.027192][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'.
[   77.083593][ T7596] IPVS: length: 209 != 24
[   77.209844][ T7604] netlink: 28 bytes leftover after parsing attributes in process `syz.2.722'.
[   77.771652][ T7645] netlink: 304 bytes leftover after parsing attributes in process `syz.0.743'.
[   78.056611][ T7668] sctp: [Deprecated]: syz.0.752 (pid 7668) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.056611][ T7668] Use struct sctp_sack_info instead
[   78.108023][ T7675] netlink: 'syz.0.755': attribute type 1 has an invalid length.
[   78.126285][ T7673] netlink: 'syz.2.756': attribute type 1 has an invalid length.
[   78.296754][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.766'.
[   78.407774][ T7705] sctp: [Deprecated]: syz.1.768 (pid 7705) Use of int in max_burst socket option.
[   78.407774][ T7705] Use struct sctp_assoc_value instead
[   80.275482][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[   80.287530][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.782'.
[   80.689446][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.2.811'.
[   80.748453][ T7815] bridge0: port 3(vlan2) entered blocking state
[   80.750733][ T7815] bridge0: port 3(vlan2) entered disabled state
[   80.752763][ T7815] vlan2: entered allmulticast mode
[   80.754426][ T7815] bridge0: entered allmulticast mode
[   80.757497][ T7815] vlan2: left allmulticast mode
[   80.759003][ T7815] bridge0: left allmulticast mode
[   80.984215][ T7845] netlink: 'syz.2.828': attribute type 1 has an invalid length.
[   81.109937][    T9] cfg80211: failed to load regulatory.db
[   81.248703][ T7863] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[   81.288296][ T7863] 8021q: adding VLAN 0 to HW filter on device bond2
[   81.305244][ T7863] bond2: (slave ip6gretap1): making interface the new active one
[   81.308220][ T7863] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link
[   81.343223][ T7863] veth3: entered promiscuous mode
[   81.346748][ T7863] bond2: (slave veth3): Enslaving as an active interface with a down link
[   81.366564][ T7863] erspan0: entered allmulticast mode
[   81.373459][ T7863] bond2: (slave erspan0): Enslaving as an active interface with an up link
[   81.435140][ T7875] xt_CT: No such helper "snmp"
[   81.561875][ T7890] tipc: Started in network mode
[   81.563478][ T7890] tipc: Node identity fa16aaeb1c1d, cluster identity 4711
[   81.565755][ T7890] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   81.579886][ T7890] syzkaller0: entered promiscuous mode
[   81.581508][ T7890] syzkaller0: entered allmulticast mode
[   81.599169][ T7890] tipc: Resetting bearer <eth:syzkaller0>
[   81.602529][ T7889] tipc: Resetting bearer <eth:syzkaller0>
[   81.608683][ T7889] tipc: Disabling bearer <eth:syzkaller0>
[   81.772328][ T7903] netlink: 'syz.2.856': attribute type 1 has an invalid length.
[   81.811699][ T7903] bond2: (slave bridge4): making interface the new active one
[   81.815944][ T7903] bond2: (slave bridge4): Enslaving as an active interface with an up link
[   82.026252][ T7919] __nla_validate_parse: 11 callbacks suppressed
[   82.026262][ T7919] netlink: 112 bytes leftover after parsing attributes in process `syz.2.863'.
[   82.034806][ T7919] netlink: 8 bytes leftover after parsing attributes in process `syz.2.863'.
[   83.251218][ T7957] netlink: 48 bytes leftover after parsing attributes in process `syz.2.878'.
[   83.254088][ T7957] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   83.256258][ T7957] IPv6: NLM_F_CREATE should be set when creating new route
[   83.303937][ T7963] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'.
[   83.433890][ T7980] netlink: 'syz.0.887': attribute type 9 has an invalid length.
[   83.440377][ T7980] netlink: 'syz.0.887': attribute type 6 has an invalid length.
[   83.499723][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[   83.631505][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   83.929631][ T8003] netlink: 'syz.1.898': attribute type 11 has an invalid length.
[   84.093091][ T8013] netlink: 'syz.1.904': attribute type 25 has an invalid length.
[   84.100242][ T8013] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.904'.
[   84.932340][ T8090] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   84.934842][ T8090] syzkaller0: entered promiscuous mode
[   84.936939][ T8090] syzkaller0: entered allmulticast mode
[   85.012230][ T8096] xt_CT: No such helper "snmp"
[   85.022333][ T8100] tipc: Resetting bearer <eth:syzkaller0>
[   85.048576][ T8090] tipc: Resetting bearer <eth:syzkaller0>
[   85.071796][ T8090] tipc: Disabling bearer <eth:syzkaller0>
[   85.112940][ T8109] netlink: 'syz.1.933': attribute type 2 has an invalid length.
[   85.115171][ T8109] netlink: 'syz.1.933': attribute type 1 has an invalid length.
[   85.117444][ T8109] netlink: 152 bytes leftover after parsing attributes in process `syz.1.933'.
[   85.306568][ T8130] bridge1: entered promiscuous mode
[   85.398500][    T9] IPVS: starting estimator thread 0...
[   85.486045][ T8143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'.
[   85.489678][ T8136] IPVS: using max 62 ests per chain, 148800 per kthread
[   85.574587][ T8153] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   85.643474][ T8161] netlink: 'syz.2.957': attribute type 1 has an invalid length.
[   85.653595][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'.
[   85.656619][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'.
[   85.663843][ T8161] netlink: 20 bytes leftover after parsing attributes in process `syz.2.957'.
[   85.667120][ T8161] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[   85.895128][ T8182] ip6t_srh: unknown srh invflags 4449
[   86.431443][ T8254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.433516][ T8254] IPv6: NLM_F_CREATE should be set when creating new route
[   86.435559][ T8254] IPv6: NLM_F_CREATE should be set when creating new route
[   86.437611][ T8254] IPv6: NLM_F_CREATE should be set when creating new route
[   86.450856][ T8254] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   86.713266][ T8288] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615)
[   86.716242][ T8288] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[   86.805902][ T8301] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   86.811485][ T8301] xt_CHECKSUM: unsupported CHECKSUM operation 68
[   87.305896][ T8345] __nla_validate_parse: 19 callbacks suppressed
[   87.305909][ T8345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1041'.
[   87.311698][ T8345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.333801][ T8345] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.617446][ T8372] xt_CT: You must specify a L4 protocol and not use inversions on it
[   87.740798][ T8380] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   87.746372][ T8380] syzkaller0: entered promiscuous mode
[   87.748034][ T8380] syzkaller0: entered allmulticast mode
[   87.764987][ T8380] tipc: Resetting bearer <eth:syzkaller0>
[   87.768921][ T8379] tipc: Resetting bearer <eth:syzkaller0>
[   87.778632][ T8379] tipc: Disabling bearer <eth:syzkaller0>
[   87.983876][ T8402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1069'.
[   88.119256][ T8421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1077'.
[   88.136521][ T8421] macvtap1: entered promiscuous mode
[   88.138215][ T8421] syz_tun: entered promiscuous mode
[   88.142582][ T8421] macvtap1: entered allmulticast mode
[   88.144188][ T8421] syz_tun: entered allmulticast mode
[   88.151999][ T8421] syz_tun: left allmulticast mode
[   88.153572][ T8421] syz_tun: left promiscuous mode
[   88.299539][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[   88.319704][ T8444] openvswitch: netlink: IP tunnel dst address not specified
[   88.865190][ T8511] vxcan1: entered allmulticast mode
[   88.871864][ T8511] vxcan1: left allmulticast mode
[   88.946559][ T8524] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1127'.
[   88.949236][ T8524] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1127'.
[   88.957750][ T8524] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[   88.963147][ T8524] gretap1: entered promiscuous mode
[   88.969051][ T8524] gretap1: entered allmulticast mode
[   88.973573][ T8511] raw_sendmsg: syz.2.1123 forgot to set AF_INET. Fix it!
[   89.027118][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1131'.
[   89.049123][ T8532] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1132'.
[   89.161315][ T8544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1137'.
[   89.213776][ T8548] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[   89.281792][ T8556] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'.
[   89.310519][ T8560] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1146'.
[   89.408216][ T8575] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   89.462795][  T789] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   89.465259][  T789] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0
[   89.502309][  T789] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa
[   89.525107][ T8587] ksmbd: Unknown IPC event: 3, ignore.
[   89.770251][ T8612] validate_nla: 16 callbacks suppressed
[   89.770277][ T8612] netlink: 'syz.2.1161': attribute type 2 has an invalid length.
[   89.774580][ T8612] netlink: 'syz.2.1161': attribute type 1 has an invalid length.
[   89.873806][ T8622] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   89.960180][ T8624] batman_adv: batadv0: Removing interface: dummy0
[   90.073685][ T8642] netlink: 'syz.0.1176': attribute type 1 has an invalid length.
[   90.082526][ T8641] vlan2: entered promiscuous mode
[   90.084139][ T8641] bond0: entered promiscuous mode
[   90.086491][ T8641] bond_slave_0: entered promiscuous mode
[   90.088461][ T8641] bond_slave_1: entered promiscuous mode
[   90.094140][ T8641] bond0: (slave vlan2): Opening slave failed
[   90.785094][ T8723] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   91.564247][ T8787] netlink: 'syz.0.1213': attribute type 1 has an invalid length.
[   91.856116][ T8804] vlan3: entered promiscuous mode
[   91.858117][ T8804] bond0: entered promiscuous mode
[   91.860509][ T8804] bond_slave_0: entered promiscuous mode
[   91.862511][ T8804] bond_slave_1: entered promiscuous mode
[   91.976626][ T8821] netlink: 'syz.2.1229': attribute type 1 has an invalid length.
[   93.422370][ T8893] __nla_validate_parse: 10 callbacks suppressed
[   93.422381][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1257'.
[   93.427036][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1257'.
[   93.621432][ T8920] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[   93.830315][ T8947] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1284'.
[   94.248475][ T8988] netlink: 'syz.0.1296': attribute type 3 has an invalid length.
[   95.182019][ T9000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1300'.
[   95.233736][ T9008] ipt_REJECT: ECHOREPLY no longer supported.
[   95.333230][ T9021] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[   95.340264][ T9018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   95.359926][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   95.378818][ T9026] sctp: [Deprecated]: syz.2.1313 (pid 9026) Use of int in max_burst socket option deprecated.
[   95.378818][ T9026] Use struct sctp_assoc_value instead
[   95.485053][ T9039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1319'.
[   95.488403][ T9039] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'.
[   95.742208][    T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   96.059400][ T5221] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   96.343866][ T9112] xt_TPROXY: Can be used only with -p tcp or -p udp
[   96.623737][ T9137] tipc: Started in network mode
[   96.625345][ T9137] tipc: Node identity 2652fe5b9115, cluster identity 4711
[   96.627722][ T9137] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   96.631052][ T9137] syzkaller0: entered promiscuous mode
[   96.632884][ T9137] syzkaller0: entered allmulticast mode
[   96.648345][ T9137] tipc: Resetting bearer <eth:syzkaller0>
[   96.653131][ T9135] tipc: Resetting bearer <eth:syzkaller0>
[   96.665524][ T9135] tipc: Disabling bearer <eth:syzkaller0>
[   97.033166][ T9157] netlink: 'syz.0.1369': attribute type 10 has an invalid length.
[   97.043032][ T9157] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.1369'.
[   97.241660][   T33] audit: type=1804 audit(1753188784.412:4): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1375" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2427 res=1 errno=0
[   97.254878][   T33] audit: type=1800 audit(1753188784.412:5): pid=9169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1375" name="x000000000000000300000000000000000000003" dev="tmpfs" ino=2427 res=0 errno=0
[   97.375249][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1381'.
[   97.544891][ T9193] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'.
[   97.904871][ T9209] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1394'.
[   98.047403][ T9215] pim6reg1: entered promiscuous mode
[   98.049596][ T9215] pim6reg1: entered allmulticast mode
[   98.312270][ T9221] batadv_slave_1: entered promiscuous mode
[   98.314490][ T9221] batadv_slave_1: left promiscuous mode
[   98.527133][ T9247] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   98.659550][ T9261] pimreg3: entered allmulticast mode
[   99.427186][ T9254] pimreg3: left allmulticast mode
[   99.828371][ T9298] netlink: 'syz.1.1437': attribute type 1 has an invalid length.
[   99.832078][ T9298] __nla_validate_parse: 3 callbacks suppressed
[   99.832085][ T9298] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1437'.
[   99.985518][ T9308] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   99.992020][ T9308] syzkaller0: entered promiscuous mode
[   99.996276][ T9308] syzkaller0: entered allmulticast mode
[  100.021187][ T9308] tipc: Resetting bearer <eth:syzkaller0>
[  100.028064][ T9306] tipc: Resetting bearer <eth:syzkaller0>
[  100.031589][ T9311] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1443'.
[  100.048376][ T9306] tipc: Disabling bearer <eth:syzkaller0>
[  100.147254][ T9319] netlink: 'syz.1.1447': attribute type 3 has an invalid length.
[  100.151436][ T9319] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1447'.
[  100.221439][ T9324] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1450'.
[  100.466646][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1462'.
[  100.750903][ T9372] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  100.753895][ T9372] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  100.756319][ T9372] netlink: 'syz.2.1472': attribute type 1 has an invalid length.
[  100.761004][ T9372] block nbd1: shutting down sockets
[  100.843514][ T9376] sctp: [Deprecated]: syz.2.1474 (pid 9376) Use of int in maxseg socket option.
[  100.843514][ T9376] Use struct sctp_assoc_value instead
[  101.358687][ T9384] pimreg3: entered allmulticast mode
[  101.513271][  T789] IPVS: starting estimator thread 0...
[  101.599475][ T9398] IPVS: using max 62 ests per chain, 148800 per kthread
[  101.664517][ T9405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1487'.
[  101.962005][ T9421] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.1500'.
[  101.965983][ T9421] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[  102.135839][ T9377] pimreg3: left allmulticast mode
[  102.432415][ T9435] netlink: 'syz.2.1498': attribute type 1 has an invalid length.
[  102.437723][ T9436] IPv6: sit1: Disabled Multicast RS
[  102.557203][ T9444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1506'.
[  103.044326][ T9465] infiniband syz0: set down
[  103.045943][ T9465] infiniband syz0: added ipvlan1
[  103.072326][ T9465] RDS/IB: syz0: added
[  103.073918][ T9465] smc: adding ib device syz0 with port count 1
[  103.075897][ T9465] smc:    ib device syz0 port 1 has pnetid 
[  103.384520][ T9489] atomic_op ffff88803ae2c998 conn xmit_atomic 0000000000000000
[  103.542668][ T9504] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1531'.
[  103.644187][   T10] IPVS: starting estimator thread 0...
[  103.702453][ T9512] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  103.702864][   T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7
[  103.731713][ T9519] IPVS: using max 62 ests per chain, 148800 per kthread
[  103.771454][ T9531] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1541'.
[  104.621332][ T5221] Bluetooth: hci2: command 0x0405 tx timeout
[  104.642414][ T9585] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  104.644706][ T9585] IPv6: NLM_F_CREATE should be set when creating new route
[  104.681779][ T9581] af_packet: tpacket_rcv: packet too big, clamped from 16 to 4294967272. macoff=96
[  104.711384][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.727019][ T9587] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.796667][ T9587] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.799698][ T9587] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.802259][ T9587] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.804890][ T9587] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  104.823837][ T9587] bridge2: left allmulticast mode
[  104.832613][ T9587] ipvlan2: left allmulticast mode
[  104.834159][ T9587] bond1: left allmulticast mode
[  104.835597][ T9587] gretap1: left allmulticast mode
[  104.843820][ T9587] macvtap1: left promiscuous mode
[  104.845466][ T9587] macvtap1: left allmulticast mode
[  104.935662][ T9594] __nla_validate_parse: 4 callbacks suppressed
[  104.935675][ T9594] netlink: 182 bytes leftover after parsing attributes in process `syz.2.1571'.
[  105.231779][ T9608] xt_hashlimit: size too large, truncated to 1048576
[  105.972786][ T9592] netlink: 'syz.1.1570': attribute type 15 has an invalid length.
[  106.261725][ T9647] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1591'.
[  106.512267][ T9665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1599'.
[  106.858097][ T9690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'.
[  106.877741][ T9691] tipc: Cannot configure node identity twice
[  107.173044][ T9706] Bluetooth: MGMT ver 1.23
[  107.275275][ T9712] x_tables: duplicate underflow at hook 2
[  107.503665][ T9732] bridge6: entered allmulticast mode
[  107.644238][   T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.647296][   T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.164445][ T9798] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1662'.
[  108.266653][ T9807] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1667'.
[  108.347657][ T9811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1667'.
[  108.366480][ T9813] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1669'.
[  108.473924][ T9821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1673'.
[  108.543419][ T9827] netlink: 'syz.1.1676': attribute type 4 has an invalid length.
[  108.623168][ T9836] netlink: 236 bytes leftover after parsing attributes in process `syz.0.1678'.
[  108.700847][ T9840] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  108.704426][ T9840] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  108.707611][ T9840] bond0: (slave ipvlan2): Error -95 calling set_mac_address
[  109.180568][ T5221] Bluetooth: hci2: Opcode 0x0401 failed: -110
[  109.181667][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[  109.202319][ T9884] netlink: 'syz.1.1700': attribute type 30 has an invalid length.
[  109.387048][ T9895] netlink: 'syz.1.1705': attribute type 8 has an invalid length.
[  109.865032][ T9931] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  109.868729][ T9931] bond0: (slave ipvlan3): The slave device specified does not support setting the MAC address
[  109.901809][ T9931] bond0: (slave ipvlan3): Error -95 calling set_mac_address
[  110.250523][ T9953] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input4
[  110.458109][ T9966] netlink: 'syz.2.1736': attribute type 7 has an invalid length.
[  110.465756][ T9966] netlink: 'syz.2.1736': attribute type 3 has an invalid length.
[  110.470552][ T9966] __nla_validate_parse: 5 callbacks suppressed
[  110.470562][ T9966] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1736'.
[  110.934312][T10010] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1752'.
[  111.695722][ T5832] Bluetooth: hci2: link tx timeout
[  111.697726][ T5832] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  111.702396][ T5832] Bluetooth: hci2: link tx timeout
[  111.704085][ T5832] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  111.803269][T10034] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1760'.
[  112.389119][T10038] netlink: 'syz.1.1760': attribute type 4 has an invalid length.
[  112.698906][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1761'.
[  113.371092][T10083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1779'.
[  113.437253][T10086] 8021q: adding VLAN 0 to HW filter on device bond0
[  113.443418][T10086] 8021q: adding VLAN 0 to HW filter on device team0
[  113.455938][T10086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  113.483085][T10090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1782'.
[  113.485799][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1782'.
[  113.645626][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1790'.
[  113.648326][T10104] netlink: 'syz.2.1790': attribute type 7 has an invalid length.
[  113.651004][T10104] netlink: 'syz.2.1790': attribute type 8 has an invalid length.
[  113.653550][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1790'.
[  113.660700][T10104] ip6gretap0: entered promiscuous mode
[  113.663222][T10104] syz_tun: entered promiscuous mode
[  113.665595][T10104] syz_tun: left promiscuous mode
[  113.667688][T10104] ip6gretap0: left promiscuous mode
[  113.704734][T10109] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on
[  113.733851][T10109] bond3: entered promiscuous mode
[  113.735598][T10109] bond3: entered allmulticast mode
[  113.737601][T10109] 8021q: adding VLAN 0 to HW filter on device bond3
[  113.753916][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[  114.003289][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'.
[  114.725909][T10178] netlink: 'syz.0.1822': attribute type 27 has an invalid length.
[  114.994455][T10196] netlink: 'syz.2.1831': attribute type 13 has an invalid length.
[  115.217103][T10207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.221928][T10207] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  115.592596][T10231] __nla_validate_parse: 3 callbacks suppressed
[  115.592609][T10231] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1847'.
[  115.821098][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  115.940503][T10247] syzkaller1: entered promiscuous mode
[  115.942257][T10247] syzkaller1: entered allmulticast mode
[  116.037962][T10249] ip6gre2: entered allmulticast mode
[  116.161703][T10257] netlink: 'syz.0.1860': attribute type 21 has an invalid length.
[  116.164339][T10257] netlink: 'syz.0.1860': attribute type 6 has an invalid length.
[  116.166665][T10257] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1860'.
[  116.668134][T10301] rdma_op ffff8881102169f0 conn xmit_rdma 0000000000000000
[  116.930364][T10334] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1898'.
[  117.285264][T10380] bridge0: entered allmulticast mode
[  117.360146][T10391] macsec0: entered promiscuous mode
[  117.362416][T10391] macsec0: left promiscuous mode
[  117.488864][T10409] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1934'.
[  117.491940][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1934'.
[  117.495598][T10409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1934'.
[  117.639546][T10425] ieee802154 phy0 wpan0: encryption failed: -90
[  117.917588][T10449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'.
[  118.153998][T10457] syzkaller1: entered promiscuous mode
[  118.155698][T10457] syzkaller1: entered allmulticast mode
[  118.206328][T10459] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  118.208602][T10459] netlink: 'syz.1.1957': attribute type 1 has an invalid length.
[  119.312036][T10540] x_tables: duplicate underflow at hook 4
[  119.411399][T10550] netlink: zone id is out of range
[  119.413057][T10550] netlink: zone id is out of range
[  119.414617][T10550] netlink: set zone limit has 4 unknown bytes
[  119.698845][T10586] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[  119.861562][T10604] netlink: 'syz.2.2022': attribute type 64 has an invalid length.
[  120.460839][T10640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2038'.
[  120.469219][T10640] pim6reg: entered allmulticast mode
[  120.472451][T10640] pim6reg: left allmulticast mode
[  120.755569][T10654] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.2044'.
[  120.759267][T10654] netlink: zone id is out of range
[  120.762755][T10654] netlink: zone id is out of range
[  120.764372][T10654] netlink: zone id is out of range
[  120.765948][T10654] netlink: get zone limit has 8 unknown bytes
[  120.803248][T10660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2047'.
[  120.913529][T10669] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 59695 - 0
[  120.916412][T10669] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 59695 - 0
[  120.919305][T10669] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 59695 - 0
[  120.922061][T10669] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 59695 - 0
[  120.927600][T10669] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 54704 - 0
[  120.931857][T10669] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 54704 - 0
[  120.934532][T10669] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 54704 - 0
[  120.937109][T10669] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 54704 - 0
[  120.940020][T10669] geneve2: entered promiscuous mode
[  120.941758][T10669] geneve2: entered allmulticast mode
[  121.056060][T10677] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2054'.
[  121.476963][T10704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.488035][T10704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 59695 - 0
[  121.492047][T10704] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 54704 - 0
[  121.563232][T10704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.566396][T10704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 59695 - 0
[  121.569908][T10704] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 54704 - 0
[  121.625288][T10704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.628386][T10704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 59695 - 0
[  121.631590][T10704] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 54704 - 0
[  121.671852][T10704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.675066][T10704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 59695 - 0
[  121.678259][T10704] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 54704 - 0
[  121.744624][T10704] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 54704 - 0
[  121.747459][T10704] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 59695 - 0
[  121.751111][T10704] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 6081 - 0
[  121.760092][T10704] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 54704 - 0
[  121.762794][T10704] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 59695 - 0
[  121.765394][T10704] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 6081 - 0
[  121.778958][T10704] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 54704 - 0
[  121.781703][T10704] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 59695 - 0
[  121.784219][T10704] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 6081 - 0
[  121.792889][T10704] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 54704 - 0
[  121.795987][T10704] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 59695 - 0
[  121.798680][T10704] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 6081 - 0
[  122.123464][T10730] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2076'.
[  122.127922][T10730] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2076'.
[  122.132375][T10730] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2076'.
[  122.252778][T10741] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2080'.
[  122.346332][T10749] netlink: 'syz.2.2084': attribute type 21 has an invalid length.
[  122.348932][T10749] netlink: 'syz.2.2084': attribute type 1 has an invalid length.
[  122.352068][T10749] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2084'.
[  122.414634][T10757] IPv6: sit1: Disabled Multicast RS
[  122.611865][T10777] geneve2: entered promiscuous mode
[  122.887420][T10805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2109'.
[  122.968887][T10813] netlink: 516 bytes leftover after parsing attributes in process `syz.1.2113'.
[  123.105330][T10829] netlink: 'syz.2.2121': attribute type 1 has an invalid length.
[  123.335581][T10845] netlink: 'syz.1.2127': attribute type 6 has an invalid length.
[  123.339681][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  123.596859][T10881] bridge: RTM_NEWNEIGH with invalid state 0x1
[  123.833456][T10907] netlink: 'syz.0.2154': attribute type 1 has an invalid length.
[  123.868947][T10907] bond4: entered promiscuous mode
[  123.872112][T10907] bond4: entered allmulticast mode
[  123.874524][T10907] 8021q: adding VLAN 0 to HW filter on device bond4
[  123.958682][T10916] netlink: 'syz.0.2154': attribute type 4 has an invalid length.
[  124.084608][T10925] netlink: del zone limit has 4 unknown bytes
[  124.103008][T10930] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[  124.106754][T10929] IPVS: stopping backup sync thread 10930 ...
[  124.795675][T10973] veth0_to_team: entered promiscuous mode
[  124.797520][T10973] veth0_to_team: entered allmulticast mode
[  125.955764][T11024] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  125.997022][T11028] macsec1: entered promiscuous mode
[  126.320890][T11058] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  126.434384][T11071] netlink: 'syz.0.2230': attribute type 303 has an invalid length.
[  126.867224][T11120] __nla_validate_parse: 8 callbacks suppressed
[  126.867235][T11120] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2254'.
[  126.873847][T11120] nbd: illegal input index 65508
[  127.085809][T11148] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  127.213355][T11160] netlink: 'syz.1.2274': attribute type 21 has an invalid length.
[  127.215878][T11160] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2274'.
[  127.218633][T11160] netlink: 'syz.1.2274': attribute type 4 has an invalid length.
[  127.223263][T11160] netlink: 'syz.1.2274': attribute type 5 has an invalid length.
[  127.225722][T11160] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2274'.
[  127.277820][T11168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2278'.
[  127.291939][T11170] netlink: 'syz.1.2279': attribute type 10 has an invalid length.
[  127.298559][T11170] batman_adv: batadv0: Adding interface: netdevsim0
[  127.302515][T11170] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.319528][T11170] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active
[  127.396988][T11182] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2284'.
[  127.699077][T11217] netlink: 'syz.0.2300': attribute type 1 has an invalid length.
[  127.704724][T11217] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2300'.
[  127.774134][   T13] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  127.844326][T11232] netlink: 'syz.0.2304': attribute type 21 has an invalid length.
[  127.847134][T11232] netlink: 'syz.0.2304': attribute type 6 has an invalid length.
[  127.850134][T11232] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2304'.
[  127.858659][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  127.875324][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  127.890776][T11232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2304'.
[  127.971177][T11241] bridge0: left allmulticast mode
[  127.998463][T11241] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.007600][T11241] 8021q: adding VLAN 0 to HW filter on device team0
[  128.012105][T11241] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  128.916282][T11258] xt_policy: too many policy elements
[  129.023718][T11267] x_tables: duplicate underflow at hook 1
[  129.438287][T11312] netlink: 'syz.0.2338': attribute type 5 has an invalid length.
[  129.848096][T11355] macvlan0: entered allmulticast mode
[  130.486709][   T33] audit: type=1800 audit(1753188817.652:6): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2374" name="memory.events" dev="tmpfs" ino=4384 res=0 errno=0
[  130.494764][   T33] audit: type=1804 audit(1753188817.662:7): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2374" name="/newroot/864/memory.events" dev="tmpfs" ino=4384 res=1 errno=0
[  130.746628][T11408] netlink: 'syz.1.2381': attribute type 1 has an invalid length.
[  130.850860][T11419] netpci0: tun_chr_ioctl cmd 1074025681
[  130.947015][T11432] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  131.246387][T11472] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  131.301336][T11477] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  131.715790][T11520] syzkaller0: entered allmulticast mode
[  132.123576][T11526] validate_nla: 4 callbacks suppressed
[  132.123587][T11526] netlink: 'syz.0.2436': attribute type 1 has an invalid length.
[  132.127772][T11526] __nla_validate_parse: 18 callbacks suppressed
[  132.127779][T11526] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2436'.
[  132.249196][T11532] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2439'.
[  132.303556][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.960462][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2451'.
[  132.969720][   T33] audit: type=1800 audit(1753188820.132:8): pid=11555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2448" name="memory.events" dev="tmpfs" ino=4302 res=0 errno=0
[  133.198857][T11581] netlink: 'syz.2.2463': attribute type 15 has an invalid length.
[  133.285461][T11593] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.2469'.
[  133.288551][T11593] openvswitch: netlink: Message has 5 unknown bytes.
[  133.324614][T11599] tipc: New replicast peer: 255.255.255.83
[  133.327098][T11599] tipc: Enabled bearer <udp:>, priority 10
[  133.392263][T11595] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  133.538161][T11613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'.
[  133.689593][T11620] xt_l2tp: v2 doesn't support IP mode
[  133.760538][T11624] openvswitch: netlink: IPv4 tun info is not correct
[  133.807139][T11628] syzkaller1: entered promiscuous mode
[  133.811438][T11628] syzkaller1: entered allmulticast mode
[  134.015347][T11646] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2491'.
[  134.170954][T11657] netlink: 'syz.0.2496': attribute type 11 has an invalid length.
[  134.260510][T11664] netlink: 212280 bytes leftover after parsing attributes in process `syz.0.2499'.
[  134.319513][T11668] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2501'.
[  134.322856][T11668] 0: renamed from hsr_slave_1 (while UP)
[  134.326809][T11668] 0: entered allmulticast mode
[  134.328610][T11668] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  134.359285][T11670] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2502'.
[  134.362351][T11670] netlink: 732 bytes leftover after parsing attributes in process `syz.0.2502'.
[  134.441966][T11676] netlink: 'syz.0.2505': attribute type 1 has an invalid length.
[  134.444555][T11676] netlink: 'syz.0.2505': attribute type 2 has an invalid length.
[  134.451057][   T10] tipc: Node number set to 3481500710
[  134.634792][T11681] dvmrp8: entered allmulticast mode
[  134.724589][T11679] dvmrp8: left allmulticast mode
[  134.814478][T11689] netlink: 'syz.1.2510': attribute type 7 has an invalid length.
[  134.928987][T11708] netlink: 'syz.0.2517': attribute type 15 has an invalid length.
[  134.982093][T11716] bond0: Unable to set up delay as MII monitoring is disabled
[  135.177776][T11739] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  135.545358][T11780] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only
[  135.546508][T11776] syzkaller0: entered allmulticast mode
[  136.731688][T11824] xt_hashlimit: max too large, truncated to 1048576
[  136.734214][T11824] xt_hashlimit: overflow, rate too high: 0
[  136.751321][T11823] 8021q: adding VLAN 0 to HW filter on device batadv2
[  136.759681][T11823] team0: Port device batadv2 added
[  136.823795][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.826366][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.022495][T11852] netlink: 'syz.1.2583': attribute type 21 has an invalid length.
[  137.148045][T11864] netlink: 'syz.1.2589': attribute type 1 has an invalid length.
[  137.155751][T11864] netlink: 'syz.1.2589': attribute type 1 has an invalid length.
[  137.268391][T11884] __nla_validate_parse: 8 callbacks suppressed
[  137.268401][T11884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2597'.
[  137.356167][T11896] xt_hashlimit: max too large, truncated to 1048576
[  137.360898][T11896] xt_hashlimit: Unknown mode mask 2000, kernel too old?
[  137.647966][T11830] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  137.713075][T11932] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2615'.
[  137.751251][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2617'.
[  137.758367][T11938] team_slave_0: entered promiscuous mode
[  137.760502][T11938] team_slave_1: entered promiscuous mode
[  137.762699][T11938] macsec3: entered promiscuous mode
[  137.764321][T11938] team0: entered promiscuous mode
[  137.766979][T11938] macsec3: entered allmulticast mode
[  137.768642][T11938] team0: entered allmulticast mode
[  137.770766][T11938] team_slave_0: entered allmulticast mode
[  137.773471][T11938] team_slave_1: entered allmulticast mode
[  137.776580][T11938] team0: Device macsec3 is already an upper device of the team interface
[  137.781808][T11938] team0: left allmulticast mode
[  137.783432][T11938] team_slave_0: left allmulticast mode
[  137.785346][T11938] team_slave_1: left allmulticast mode
[  137.787021][T11938] team0: left promiscuous mode
[  137.788913][T11938] team_slave_0: left promiscuous mode
[  137.790894][T11938] team_slave_1: left promiscuous mode
[  137.941997][T11945] bond0: option arp_validate: invalid value (18446744073491447809)
[  137.942048][   T13] bond0: (slave bond_slave_0): interface is now down
[  137.946731][   T13] bond0: (slave bond_slave_1): interface is now down
[  137.956620][   T13] bond0: now running without any active interface!
[  138.168516][T11953] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  138.186404][T11955] netlink: 'syz.2.2626': attribute type 1 has an invalid length.
[  138.213324][T11955] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0
[  138.215999][T11955] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0
[  138.218578][T11955] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0
[  138.221338][T11955] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0
[  138.225151][T11955] bond3: (slave geneve2): making interface the new active one
[  138.227920][T11955] bond3: (slave geneve2): Enslaving as an active interface with an up link
[  138.240802][T11955] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link
[  138.246302][T11955] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2626'.
[  138.251282][T11955] 8021q: adding VLAN 0 to HW filter on device bond3
[  138.686758][T11987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  139.166852][T12002] netlink: 'syz.2.2647': attribute type 1 has an invalid length.
[  139.169451][T12002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2647'.
[  139.172304][T12002] NCSI netlink: No device for ifindex 0
[  139.640687][T12009] vlan2: entered promiscuous mode
[  139.642400][T12009] vlan2: entered allmulticast mode
[  139.643941][T12009] hsr_slave_1: entered allmulticast mode
[  139.743514][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2649'.
[  139.916885][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'.
[  139.928634][T12026] bridge9: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  140.584014][T12056] netlink: 'syz.1.2665': attribute type 2 has an invalid length.
[  140.669510][T12062] netlink: 'syz.2.2668': attribute type 1 has an invalid length.
[  140.673622][T12062] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2668'.
[  140.762987][T12073] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2670'.
[  140.766703][T12067] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2670'.
[  140.981569][T12089] smc: net device bond0 applied user defined pnetid SYZ2
[  141.016391][T12088] bond5: (slave bridge3): Enslaving as an active interface with an up link
[  141.055282][T12088] macvlan4: entered promiscuous mode
[  141.056973][T12088] macvlan4: entered allmulticast mode
[  141.058954][T12088] bond5: (slave macvlan4): Error -98 calling set_mac_address
[  142.103172][T12182] netlink: 'syz.2.2722': attribute type 2 has an invalid length.
[  142.105773][T12182] netlink: 'syz.2.2722': attribute type 1 has an invalid length.
[  142.350329][T12212] netlink: 'syz.1.2738': attribute type 49 has an invalid length.
[  142.454480][T12222] netlink: 'syz.1.2744': attribute type 9 has an invalid length.
[  142.456935][T12222] netlink: 'syz.1.2744': attribute type 7 has an invalid length.
[  142.463467][T12222] netlink: 'syz.1.2744': attribute type 8 has an invalid length.
[  142.532691][T12229] ipt_ECN: cannot use operation on non-tcp rule
[  142.776976][T12255] __nla_validate_parse: 6 callbacks suppressed
[  142.776987][T12255] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2758'.
[  142.780304][T12258] netlink: 'syz.2.2759': attribute type 1 has an invalid length.
[  142.792950][T12255] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2758'.
[  142.891369][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'.
[  142.898373][T12266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2764'.
[  143.099107][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'.
[  143.137491][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2776'.
[  143.163800][T12292] bridge_slave_1 (unregistering): left allmulticast mode
[  143.166094][T12292] bridge_slave_1 (unregistering): left promiscuous mode
[  143.168330][T12292] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.304800][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'.
[  143.307590][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2779'.
[  143.373193][T12302] syzkaller0: entered promiscuous mode
[  143.375043][T12302] syzkaller0: entered allmulticast mode
[  144.560240][T12320] openvswitch: netlink: IPv4 tunnel dst address is zero
[  144.593736][T12324] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2790'.
[  144.596412][T12324] netlink: 37 bytes leftover after parsing attributes in process `syz.2.2790'.
[  144.606734][T12326] netlink: 'syz.0.2791': attribute type 1 has an invalid length.
[  144.611278][T12326] netlink: 'syz.0.2791': attribute type 2 has an invalid length.
[  144.795495][T12345] netlink: 'syz.0.2800': attribute type 3 has an invalid length.
[  145.408438][T12386] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  145.435202][T12386] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.443963][T12386] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  146.795730][T12471] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048)
[  147.808020][T12491] __nla_validate_parse: 6 callbacks suppressed
[  147.808031][T12491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2862'.
[  147.851936][T12495] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4300
[  147.933397][T12505] sctp: [Deprecated]: syz.1.2869 (pid 12505) Use of int in max_burst socket option deprecated.
[  147.933397][T12505] Use struct sctp_assoc_value instead
[  147.964154][T12509] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2871'.
[  147.966931][T12509] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2871'.
[  148.024746][T12515] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2873'.
[  148.160943][T12528] netlink: 'syz.1.2878': attribute type 23 has an invalid length.
[  148.456093][ T6449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.460161][ T6449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.524511][T12552] tap0: tun_chr_ioctl cmd 1074025680
[  148.527246][T12552] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.532206][T12552] D: renamed from syzkaller0
[  148.536100][T12552] tipc: Disabling bearer <eth:syzkaller0>
[  148.873489][T12576] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  148.880001][T12576] syzkaller0: entered promiscuous mode
[  148.881754][T12576] syzkaller0: entered allmulticast mode
[  148.907450][T12576] tipc: Resetting bearer <eth:syzkaller0>
[  148.916027][T12575] tipc: Resetting bearer <eth:syzkaller0>
[  148.949922][T12575] tipc: Disabling bearer <eth:syzkaller0>
[  149.213911][T12612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2915'.
[  149.268849][T12617] netlink: 'syz.1.2918': attribute type 4 has an invalid length.
[  149.762121][T12637] netlink: 'syz.1.2924': attribute type 1 has an invalid length.
[  149.856695][T12644] delete_channel: no stack
[  150.483247][T12704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2956'.
[  150.486027][T12704] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  150.488490][T12704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.492721][T12702] netlink: 'syz.2.2955': attribute type 1 has an invalid length.
[  150.539152][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'.
[  150.542568][T12707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2958'.
[  150.568237][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2958'.
[  150.572131][T12707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2958'.
[  150.672922][   T12] nci: nci_ntf_packet: unknown ntf opcode 0x206
[  151.632207][T12758] xt_bpf: check failed: parse error
[  151.705826][T12762] veth0_to_bridge: entered promiscuous mode
[  151.715120][T12760] veth0_to_bridge: left promiscuous mode
[  152.251793][T12826] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  152.259189][T12826] syzkaller0: entered promiscuous mode
[  152.268407][T12826] syzkaller0: entered allmulticast mode
[  152.312577][T12826] tipc: Resetting bearer <eth:syzkaller0>
[  152.365773][T12825] tipc: Resetting bearer <eth:syzkaller0>
[  152.396006][T12825] tipc: Disabling bearer <eth:syzkaller0>
[  152.562300][T12850] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate.
[  152.660492][T12854] syzkaller0: entered promiscuous mode
[  152.662211][T12854] syzkaller0: entered allmulticast mode
[  153.979109][T12870] __nla_validate_parse: 1 callbacks suppressed
[  153.979151][T12870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3029'.
[  153.991536][T12870] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3029'.
[  154.087712][T12878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3032'.
[  154.241962][T12890] netlink: 'syz.0.3037': attribute type 4 has an invalid length.
[  154.793308][T12941] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3061'.
[  154.845113][T12947] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3064'.
[  155.017733][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3070'.
[  155.702834][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3096'.
[  155.705647][T13017] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3096'.
[  155.737422][   T33] audit: type=1107 audit(1753188842.902:9): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='!6FB'
[  155.890609][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3099'.
[  155.898651][T13026] erspan0: entered promiscuous mode
[  155.907310][T13026] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3099'.
[  157.215939][T13111] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  157.223118][T13111] netlink: 'syz.2.3135': attribute type 4 has an invalid length.
[  157.345286][T13111] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.348526][T13111] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.352401][T13111] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0
[  157.356216][T13111] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0
[  159.162509][T13204] netlink: 'syz.2.3178': attribute type 30 has an invalid length.
[  159.456869][T13211] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.523718][T13211] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.585622][T13211] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.637965][T13211] batman_adv: batadv0: Removing interface: netdevsim0
[  159.714615][T13211] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  159.725228][T13211] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  159.734902][T13211] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  159.743733][T13211] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  160.634210][T13237] SET target dimension over the limit!
[  161.436862][T13279] syzkaller0: entered promiscuous mode
[  161.438521][T13279] syzkaller0: entered allmulticast mode
[  161.606511][T13289] __nla_validate_parse: 7 callbacks suppressed
[  161.606521][T13289] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3215'.
[  161.837105][T13295] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3218'.
[  161.851909][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3218'.
[  161.855166][T13295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3218'.
[  163.316002][T13350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3243'.
[  163.348382][T13352] netlink: 'syz.2.3244': attribute type 4 has an invalid length.
[  163.478572][T13369] ieee802154 phy1 wpan1: encryption failed: -22
[  163.511766][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'.
[  163.514592][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'.
[  163.556775][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'.
[  163.561270][T13378] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3256'.
[  163.564005][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3256'.
[  163.597632][T13382] netlink: 'syz.2.3258': attribute type 1 has an invalid length.
[  163.605072][T13382] netlink: 'syz.2.3258': attribute type 4 has an invalid length.
[  163.839197][T13397] netlink: 'syz.2.3262': attribute type 2 has an invalid length.
[  164.378207][T13413] ipt_ECN: cannot use operation on non-tcp rule
[  164.503959][T13413] syzkaller0: entered allmulticast mode
[  164.516117][T13413] syzkaller0 (unregistering): left allmulticast mode
[  164.968133][T13451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  165.161112][T13474] syzkaller1: entered promiscuous mode
[  165.162948][T13474] syzkaller1: entered allmulticast mode
[  165.325595][T13494] netlink: 'syz.1.3308': attribute type 7 has an invalid length.
[  165.415593][T13506] tipc: Enabled bearer <udp:syz2>, priority 10
[  165.472987][T13515] netlink: 'syz.1.3317': attribute type 1 has an invalid length.
[  165.476555][T13515] netlink: 'syz.1.3317': attribute type 2 has an invalid length.
[  165.519008][   T29] smc: removing ib device syz2
[  165.676511][T13533] syz_tun: entered promiscuous mode
[  165.681869][T13533] vlan2: entered promiscuous mode
[  165.837742][T13541] netlink: 'syz.0.3331': attribute type 5 has an invalid length.
[  165.853343][T13541] ip6erspan0: entered promiscuous mode
[  166.073042][T13565] netlink: 'syz.0.3343': attribute type 29 has an invalid length.
[  166.242645][T13589] pim6reg: entered allmulticast mode
[  166.540060][   T10] tipc: Node number set to 3074948699
[  166.647629][T13630] xt_time: invalid argument - start or stop time greater than 23:59:59
[  166.723322][T13636] __nla_validate_parse: 8 callbacks suppressed
[  166.723336][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3371'.
[  166.725992][T13638] netlink: 'syz.1.3372': attribute type 7 has an invalid length.
[  166.983307][T13664] veth0: entered promiscuous mode
[  167.002815][T13664] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3385'.
[  167.388173][T13710] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3408'.
[  167.533857][T13718] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  167.777776][T13740] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.846700][T13740] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.915969][T13740] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.977297][T13740] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.052321][T13740] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.069439][T13740] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.083462][T13740] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.092468][T13740] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.676601][T13769] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3433'.
[  170.237844][T13838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3462'.
[  170.765080][T13858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3471'.
[  170.805756][T13860] netlink: 'syz.2.3472': attribute type 12 has an invalid length.
[  170.931709][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'.
[  171.213670][T13897] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  171.345497][T13910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3496'.
[  171.694517][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3508'.
[  171.979509][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  172.339733][T13999] IPv6: Can't replace route, no match found
[  172.578331][T14014] bridge10: entered promiscuous mode
[  172.732504][T14022] netlink: 'syz.1.3548': attribute type 3 has an invalid length.
[  172.747466][T14022] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3548'.
[  172.913770][T14030] TCP: TCP_TX_DELAY enabled
[  173.618454][T14059] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3565'.
[  173.953201][T14085] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3577'.
[  174.031066][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3587'.
[  174.119128][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3590'.
[  174.123973][T14115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3590'.
[  174.135745][T14115] netlink: 'syz.1.3590': attribute type 7 has an invalid length.
[  174.472062][T14154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3610'.
[  174.479862][T14159] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3612'.
[  174.482684][T14159] 0X: renamed from caif0
[  174.486137][T14159] 0X: entered allmulticast mode
[  174.487751][T14159] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  175.672772][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3635'.
[  175.675553][T14219] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3635'.
[  177.581444][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  177.791708][T14315] bridge_slave_0: left allmulticast mode
[  177.793460][T14315] bridge_slave_0: left promiscuous mode
[  177.795220][T14315] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.802440][T14315] bridge_slave_1: left allmulticast mode
[  177.804157][T14315] bridge_slave_1: left promiscuous mode
[  177.805880][T14315] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.830874][T14315] bond0: (slave bond_slave_0): Releasing backup interface
[  177.834080][T14315] bond_slave_0: left promiscuous mode
[  177.839110][T14315] bond0: (slave bond_slave_1): Releasing backup interface
[  177.845165][T14315] bond_slave_1: left promiscuous mode
[  177.863176][T14315] team0: Port device team_slave_0 removed
[  177.867913][T14315] team0: Port device team_slave_1 removed
[  177.871061][T14315] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.873305][T14315] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.058426][T14341] syzkaller1: entered promiscuous mode
[  178.062777][T14341] syzkaller1: entered allmulticast mode
[  178.456037][T14363] syzkaller0: entered promiscuous mode
[  178.457719][T14363] syzkaller0: entered allmulticast mode
[  179.199580][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3696'.
[  179.659658][ T5832] Bluetooth: hci2: command 0x0405 tx timeout
[  179.915828][T14407] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3715'.
[  180.038766][T14413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3718'.
[  180.058793][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'.
[  180.160296][T14417] netlink: 'syz.2.3720': attribute type 1 has an invalid length.
[  180.343128][T14431] netlink: 'syz.2.3727': attribute type 1 has an invalid length.
[  180.424184][T14437] delete_channel: no stack
[  180.469529][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  180.595446][T14451] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3737'.
[  180.612859][T14451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.615715][T14451] bond_slave_0: left promiscuous mode
[  180.618256][T14451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  180.623384][T14451] bond_slave_1: left promiscuous mode
[  180.625544][T14451] bond0 (unregistering): Released all slaves
[  180.875920][T14470] tipc: New replicast peer: 255.255.255.255
[  180.878264][T14470] tipc: Enabled bearer <udp:syz2>, priority 10
[  181.148406][ T5842] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  181.314443][T14484] gre0: entered allmulticast mode
[  181.322573][T14484] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  181.921718][T14488] netlink: 'syz.0.3752': attribute type 1 has an invalid length.
[  181.929528][T14488] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3752'.
[  182.154462][T14513] bridge6: entered promiscuous mode
[  182.662164][T14560] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  182.725125][T14570] macsec2: entered promiscuous mode
[  182.726706][T14570] macsec2: entered allmulticast mode
[  182.925262][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3799'.
[  183.099496][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  183.267384][T14631] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  183.479970][T14657] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  183.691202][T14679] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3839'.
[  183.766430][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3843'.
[  183.826366][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3848'.
[  183.829204][T14695] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[  183.885021][T14704] openvswitch: netlink: nsh attribute has 5276 unknown bytes.
[  183.888409][T14704] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  184.139492][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  184.263558][T14742] __nla_validate_parse: 4 callbacks suppressed
[  184.263569][T14742] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3867'.
[  184.526107][T14777] netlink: 300 bytes leftover after parsing attributes in process `syz.1.3885'.
[  184.792437][ T5881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  184.796676][T14813] netlink: 'syz.1.3901': attribute type 1 has an invalid length.
[  184.862685][T14817] tun0: tun_chr_ioctl cmd 1074025675
[  184.864303][T14817] tun0: persist enabled
[  184.866671][T14817] tun0: tun_chr_ioctl cmd 1074025675
[  184.868282][T14817] tun0: persist enabled
[  184.903173][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3906'.
[  184.905899][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3906'.
[  185.025988][T14838] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  185.179452][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  185.197287][T14857] netlink: 280 bytes leftover after parsing attributes in process `syz.2.3922'.
[  185.271623][   T24] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  186.132364][T14909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3942'.
[  186.219474][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  186.260972][T14919] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3947'.
[  186.598722][T14946] netlink: 'syz.1.3959': attribute type 11 has an invalid length.
[  186.706083][T14953] netlink: 'syz.2.3960': attribute type 12 has an invalid length.
[  186.708433][T14953] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.3960'.
[  187.021977][T14979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  187.259395][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  187.713260][T14990] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3976'.
[  187.779058][T14994] netlink: 'syz.1.3978': attribute type 83 has an invalid length.
[  187.904172][T15000] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.961352][T15005] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3983'.
[  188.282442][T15042] netlink: 'syz.2.3999': attribute type 1 has an invalid length.
[  188.300068][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  188.359684][T15050] netlink: 'syz.2.4003': attribute type 1 has an invalid length.
[  188.616545][T15080] sctp: [Deprecated]: syz.2.4017 (pid 15080) Use of struct sctp_assoc_value in delayed_ack socket option.
[  188.616545][T15080] Use struct sctp_sack_info instead
[  189.335817][T15152] __nla_validate_parse: 7 callbacks suppressed
[  189.335829][T15152] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'.
[  189.349510][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  189.482045][T15170] netlink: 'syz.1.4061': attribute type 1 has an invalid length.
[  189.484443][T15170] netlink: 208 bytes leftover after parsing attributes in process `syz.1.4061'.
[  189.537213][T15177] sit2: entered promiscuous mode
[  189.754237][T15209] netlink: 'syz.0.4079': attribute type 7 has an invalid length.
[  189.771218][T15209] : entered promiscuous mode
[  189.801539][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4081'.
[  189.804522][T15213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4081'.
[  189.908321][T15217] bridge0: entered promiscuous mode
[  189.912797][T15217] vlan2: entered promiscuous mode
[  190.046251][T15241] netlink: 134788 bytes leftover after parsing attributes in process `syz.0.4091'.
[  190.232370][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4100'.
[  190.379469][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  190.779433][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4108'.
[  190.790844][T15276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  191.376783][T15287] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4113'.
[  191.379657][T15287] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4113'.
[  191.419515][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  191.514069][T15300] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  191.518334][T15300] syzkaller0: MTU too low for tipc bearer
[  191.520534][T15300] tipc: Disabling bearer <eth:syzkaller0>
[  191.607965][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4121'.
[  192.063830][T15328] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.066450][T15328] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.068981][T15328] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.073423][T15328] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  192.255008][T15347] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  192.264124][T15347] syzkaller0: entered promiscuous mode
[  192.265841][T15347] syzkaller0: entered allmulticast mode
[  192.284783][T15347] tipc: Resetting bearer <eth:syzkaller0>
[  192.290744][T15346] tipc: Resetting bearer <eth:syzkaller0>
[  192.300235][T15346] tipc: Disabling bearer <eth:syzkaller0>
[  192.413582][T15351] syzkaller0: tun_chr_ioctl cmd 1074812118
[  192.459766][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  192.579060][T15361] ieee802154 phy1 wpan1: encryption failed: -22
[  193.208510][T15416] 8021q: adding VLAN 0 to HW filter on device bond8
[  193.222114][T15416] macvlan5: entered promiscuous mode
[  193.224036][T15416] macvlan5: entered allmulticast mode
[  193.226483][T15416] bond8: entered promiscuous mode
[  193.228476][T15416] 8021q: adding VLAN 0 to HW filter on device macvlan5
[  193.238585][T15416] bond8: left promiscuous mode
[  193.499561][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  193.753567][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.316256][T15433] team1: entered promiscuous mode
[  194.318275][T15433] team1: entered allmulticast mode
[  194.539483][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  194.753881][T15475] __nla_validate_parse: 4 callbacks suppressed
[  194.753894][T15475] netlink: 168 bytes leftover after parsing attributes in process `syz.2.4203'.
[  195.042821][T15495] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4213'.
[  195.047155][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4213'.
[  195.133168][T15513] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  195.148588][T15513] bridge_slave_0: left allmulticast mode
[  195.152760][T15513] bridge_slave_0: left promiscuous mode
[  195.155286][T15513] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.168774][T15513] team0: Port device team_slave_0 removed
[  195.174544][T15513] team0: Port device team_slave_1 removed
[  195.176893][T15513] batman_adv: batadv0: Removing interface: batadv_slave_0
[  195.182047][T15513] batman_adv: batadv0: Removing interface: batadv_slave_1
[  195.185382][T15513] bond1: (slave gretap1): Releasing active interface
[  195.191368][T15513] team0: Port device batadv1 removed
[  195.194269][T15513] bond2: (slave bridge4): Releasing active interface
[  195.198193][T15513] team0: Port device batadv2 removed
[  195.205262][T15513] bond3: (slave geneve2): Releasing active interface
[  195.207460][T15513] bond3: (slave geneve2): the permanent HWaddr of slave - 16:d3:55:ba:0d:d1 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[  195.213186][T15513] bond3: (slave ip6gretap1): making interface the new active one
[  195.219249][T15513] bond3: (slave ip6gretap1): Releasing active interface
[  195.226246][T15513] netlink: 'syz.2.4221': attribute type 10 has an invalid length.
[  195.228657][T15513] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  195.579479][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  196.201697][T15555] netlink: 'syz.2.4241': attribute type 2 has an invalid length.
[  196.480930][T15581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4250'.
[  196.595916][T15591] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode
[  196.611393][T15591] netlink: 'syz.1.4254': attribute type 10 has an invalid length.
[  196.613875][T15591] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  196.616897][T15591] bond0: (slave wlan1): refused to change device type
[  196.619428][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  196.698441][T15595] syzkaller0: entered promiscuous mode
[  196.703248][T15595] syzkaller0: entered allmulticast mode
[  197.669461][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  198.318753][T15626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4268'.
[  198.437535][T15632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4270'.
[  198.600699][T15650] veth1_to_team: entered allmulticast mode
[  198.607292][T15650] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check.
[  198.643027][T15652] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  198.671768][T15656] xt_CT: You must specify a L4 protocol and not use inversions on it
[  198.699487][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  198.860001][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  198.995439][T15680] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4293'.
[  198.998191][T15680] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4293'.
[  199.156055][T15678] netlink: 'syz.1.4292': attribute type 1 has an invalid length.
[  199.158560][T15678] nbd: error processing sock list
[  199.160513][T15678] block nbd1: shutting down sockets
[  199.331517][T15699] netlink: 136784 bytes leftover after parsing attributes in process `syz.0.4303'.
[  199.334477][T15699] netlink: zone id is out of range
[  199.336074][T15699] netlink: zone id is out of range
[  199.337855][T15699] netlink: zone id is out of range
[  199.340352][T15699] netlink: zone id is out of range
[  199.341982][T15699] netlink: zone id is out of range
[  199.343562][T15699] netlink: zone id is out of range
[  199.345109][T15699] netlink: zone id is out of range
[  199.721638][T15730] xt_CT: No such helper "snmp"
[  199.803332][T15744] netlink: 'syz.0.4318': attribute type 2 has an invalid length.
[  199.812995][T15744] : entered promiscuous mode
[  199.818066][T15745] Cannot find set identified by id 0 to match
[  200.066207][T15776] netlink: 404 bytes leftover after parsing attributes in process `syz.0.4335'.
[  200.069025][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4335'.
[  200.073373][T15776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4335'.
[  200.078858][T15776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4335'.
[  200.083289][T15778] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4336'.
[  200.137566][T15784] netlink: 'syz.0.4339': attribute type 1 has an invalid length.
[  200.181343][T15784] 8021q: adding VLAN 0 to HW filter on device bond10
[  200.185316][T15784] bond9: (slave bond10): making interface the new active one
[  200.198869][T15784] bond9: (slave bond10): Enslaving as an active interface with an up link
[  200.227258][T15784] bond9: (slave gretap2): Enslaving as a backup interface with an up link
[  200.241707][T15784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4339'.
[  200.246614][T15784] 8021q: adding VLAN 0 to HW filter on device bond9
[  200.291659][T15796] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  200.336737][T15802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4346'.
[  200.404855][T15808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4348'.
[  200.456481][T15812] bridge11: entered promiscuous mode
[  200.458170][T15812] bridge11: entered allmulticast mode
[  200.467383][T15812] team0: Port device bridge11 added
[  200.477314][T15812] rdma_rxe: rxe_newlink: failed to add macvlan1
[  200.908163][T15855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4369'.
[  200.956305][T15861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4374'.
[  201.065060][ T5882] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6
[  201.446303][T15925] sock: sock_timestamping_bind_phc: sock not bind to device
[  201.837907][T15964] bridge0: port 4(hsr1) entered disabled state
[  201.850211][T15964] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.854243][T15964] bridge0: port 2(bridge_slave_1) entered disabled state
[  202.068126][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.080462][T15966] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.161661][T15966] netdevsim netdevsim0 eth0: unset [1, 2] type 2 family 0 port 6081 - 0
[  202.164098][T15966] netdevsim netdevsim0 eth1: unset [1, 2] type 2 family 0 port 6081 - 0
[  202.166598][T15966] netdevsim netdevsim0 eth2: unset [1, 2] type 2 family 0 port 6081 - 0
[  202.169001][T15966] netdevsim netdevsim0 eth3: unset [1, 2] type 2 family 0 port 6081 - 0
[  202.218608][T15966] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 54704 - 0
[  202.221281][T15966] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 54704 - 0
[  202.223795][T15966] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 54704 - 0
[  202.226212][T15966] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 54704 - 0
[  202.228984][T15966] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 59695 - 0
[  202.232504][T15966] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 59695 - 0
[  202.234968][T15966] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 59695 - 0
[  202.237412][T15966] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 59695 - 0
[  202.444221][T15991] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode
[  202.462418][T15991] team0: Port device bridge11 removed
[  202.467952][T15991] netlink: 'syz.2.4430': attribute type 10 has an invalid length.
[  202.471645][T15991] mac80211_hwsim hwsim5 wlan1: left allmulticast mode
[  202.478488][T15991] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  202.482014][T15991] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  202.675400][T15999] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  202.791193][T16006] netlink: 'syz.1.4438': attribute type 1 has an invalid length.
[  202.859480][    C0] net_ratelimit: 4059 callbacks suppressed
[  202.859494][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  203.525070][T16075] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  203.899607][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  204.168282][T16140] netlink: 'syz.1.4497': attribute type 22 has an invalid length.
[  204.272581][T16150] netlink: 'syz.2.4502': attribute type 5 has an invalid length.
[  204.471617][T16172] xt_hashlimit: size too large, truncated to 1048576
[  204.475697][T16172] xt_hashlimit: max too large, truncated to 1048576
[  204.623360][T16185] veth0: entered promiscuous mode
[  204.630976][T16184] veth0: left promiscuous mode
[  204.939460][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  205.144828][T16238] netlink: 'syz.0.4544': attribute type 39 has an invalid length.
[  205.636468][T16290] netlink: 'syz.1.4570': attribute type 1 has an invalid length.
[  205.743339][T16302] ieee802154 phy1 wpan1: encryption failed: -22
[  205.745404][T16302] ieee802154 phy1 wpan1: encryption failed: -22
[  205.887810][T16313] __nla_validate_parse: 14 callbacks suppressed
[  205.887823][T16313] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4580'.
[  205.898891][T16313] netem: change failed
[  205.979588][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  206.152795][T16335] bridge0: port 1(syz_tun) entered blocking state
[  206.155124][T16335] bridge0: port 1(syz_tun) entered disabled state
[  206.157429][T16335] syz_tun: entered allmulticast mode
[  206.160214][T16335] syz_tun: entered promiscuous mode
[  206.162264][T16334] netlink: 724 bytes leftover after parsing attributes in process `syz.2.4590'.
[  206.164942][T16334] netlink: 83 bytes leftover after parsing attributes in process `syz.2.4590'.
[  206.210951][T16339] netlink: 'syz.1.4592': attribute type 1 has an invalid length.
[  206.213258][T16339] netlink: 228 bytes leftover after parsing attributes in process `syz.1.4592'.
[  206.375536][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4597'.
[  206.503009][T16375] netlink: 'syz.2.4603': attribute type 13 has an invalid length.
[  206.505853][T16375] netlink: 'syz.2.4603': attribute type 17 has an invalid length.
[  206.527349][T16375] erspan0: left promiscuous mode
[  206.571484][T16375] 8021q: adding VLAN 0 to HW filter on device team0
[  206.575757][T16375] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  206.633882][T16378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4608'.
[  206.654789][T16378] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4608'.
[  206.708979][T16375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.714648][T16385] netlink: 'syz.1.4611': attribute type 14 has an invalid length.
[  206.766942][T16376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.838767][T16375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  206.865061][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4615'.
[  206.869559][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[  206.995411][T16414] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  207.019524][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  207.156695][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4627'.
[  207.166283][T16422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4627'.
[  207.214212][T16428] x_tables: unsorted entry at hook 3
[  207.247397][T16432] batadv_slave_1: entered promiscuous mode
[  207.260203][T16432] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.308620][T16436] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  207.319062][T16436] syzkaller0: entered promiscuous mode
[  207.326417][T16436] syzkaller0: entered allmulticast mode
[  207.345004][T16436] sch_tbf: burst 151 is lower than device syzkaller0 mtu (1514) !
[  207.351697][T16436] tipc: Resetting bearer <eth:syzkaller0>
[  207.357606][T16435] tipc: Resetting bearer <eth:syzkaller0>
[  207.385218][T16435] tipc: Disabling bearer <eth:syzkaller0>
[  207.726813][T16454] validate_nla: 1 callbacks suppressed
[  207.726827][T16454] netlink: 'syz.1.4644': attribute type 1 has an invalid length.
[  208.022900][T16475] x_tables: unsorted entry at hook 3
[  208.069549][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  208.131685][T16480] netlink: 'syz.0.4653': attribute type 13 has an invalid length.
[  208.135944][T16480] netlink: 'syz.0.4653': attribute type 17 has an invalid length.
[  208.163084][T16480] gre0: left allmulticast mode
[  208.165973][T16480] erspan0: left allmulticast mode
[  208.199721][T16480] 8021q: adding VLAN 0 to HW filter on device team0
[  208.204321][T16480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  208.421835][T16480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.476306][T16480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.535351][T16483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  208.549083][T16495] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 0
[  209.099512][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  209.469532][T16519] netlink: 'syz.2.4671': attribute type 1 has an invalid length.
[  209.472742][T16519] nbd: error processing sock list
[  209.475982][T16519] block nbd1: shutting down sockets
[  209.526002][T16521] batadv_slave_1: entered promiscuous mode
[  209.676980][T16534] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  209.683196][T16534] syzkaller0: entered promiscuous mode
[  209.684968][T16534] syzkaller0: entered allmulticast mode
[  209.703363][T16534] sch_fq: defrate 257 ignored.
[  209.706535][T16534] tipc: Resetting bearer <eth:syzkaller0>
[  209.716129][T16532] tipc: Resetting bearer <eth:syzkaller0>
[  209.727901][T16532] tipc: Disabling bearer <eth:syzkaller0>
[  209.961034][T16558] xt_CT: No such helper "snmp"
[  210.055325][T16573] netlink: 'syz.1.4697': attribute type 2 has an invalid length.
[  210.075353][T16573] : entered promiscuous mode
[  210.139458][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  210.143409][T16582] set match dimension is over the limit!
[  210.204056][T16590] batadv_slave_1: entered promiscuous mode
[  210.262958][T16596] sctp: [Deprecated]: syz.1.4712 (pid 16596) Use of int in maxseg socket option.
[  210.262958][T16596] Use struct sctp_assoc_value instead
[  210.311158][T16602] netlink: 'syz.1.4715': attribute type 1 has an invalid length.
[  210.355987][T16602] 8021q: adding VLAN 0 to HW filter on device bond4
[  210.358993][T16602] bond3: (slave bond4): making interface the new active one
[  210.372131][T16602] bond3: (slave bond4): Enslaving as an active interface with an up link
[  210.399988][T16602] bond3: (slave gretap2): Enslaving as a backup interface with an up link
[  210.420292][T16602] 8021q: adding VLAN 0 to HW filter on device bond3
[  210.436911][T16616] bridge7: the hash_elasticity option has been deprecated and is always 16
[  210.440033][T16616] bridge7: entered allmulticast mode
[  210.491750][T16619] sctp: [Deprecated]: syz.2.4717 (pid 16619) Use of int in maxseg socket option.
[  210.491750][T16619] Use struct sctp_assoc_value instead
[  211.044152][T16677] bridge8: entered promiscuous mode
[  211.045786][T16677] bridge8: entered allmulticast mode
[  211.055450][T16677] team0: Port device bridge8 added
[  211.066959][T16677] rdma_rxe: rxe_newlink: failed to add macvlan1
[  211.179507][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  211.182688][T16694] __nla_validate_parse: 11 callbacks suppressed
[  211.182701][T16694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4753'.
[  211.356054][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4762'.
[  211.360551][T16719] netlink: 268 bytes leftover after parsing attributes in process `syz.1.4761'.
[  212.219416][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  212.613008][T16760] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.4780'.
[  212.705757][T16769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4785'.
[  212.725259][T16771] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4786'.
[  212.824928][T16784] netlink: 'syz.0.4793': attribute type 1 has an invalid length.
[  212.827329][T16784] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4793'.
[  212.869370][T16791] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  212.875246][T16790] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.4796'.
[  212.956573][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4802'.
[  212.960501][T16803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4802'.
[  213.084631][T16814] openvswitch: netlink: VXLAN extension message has 1 unknown bytes.
[  213.259535][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  214.309698][    C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  215.172891][T16959] ip6t_srh: unknown srh invflags 4000
[  215.177968][T16960] veth0: entered promiscuous mode
[  215.186733][T16958] veth0: left promiscuous mode
[  215.691091][T17014] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  215.693688][T17014] syzkaller0: entered promiscuous mode
[  215.695387][T17014] syzkaller0: entered allmulticast mode
[  215.709213][T17014] tipc: Resetting bearer <eth:syzkaller0>
[  215.714863][T17013] tipc: Resetting bearer <eth:syzkaller0>
[  215.731143][T17013] tipc: Disabling bearer <eth:syzkaller0>
[  215.846648][T17030] nbd: socks must be embedded in a SOCK_ITEM attr
[  215.866528][T17032] 8021q: adding VLAN 0 to HW filter on device bond11
[  215.890139][ T1088] 
[  215.890934][ T1088] ======================================================
[  215.892994][ T1088] WARNING: possible circular locking dependency detected
[  215.895060][ T1088] 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 Not tainted
[  215.897815][ T1088] ------------------------------------------------------
[  215.900063][ T1088] kworker/u9:6/1088 is trying to acquire lock:
[  215.901865][ T1088] ffff888022b54358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0
[  215.904598][ T1088] 
[  215.904598][ T1088] but task is already holding lock:
[  215.906712][ T1088] ffff888022b4f188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  215.909507][ T1088] 
[  215.909507][ T1088] which lock already depends on the new lock.
[  215.909507][ T1088] 
[  215.912502][ T1088] 
[  215.912502][ T1088] the existing dependency chain (in reverse order) is:
[  215.915106][ T1088] 
[  215.915106][ T1088] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  215.917584][ T1088]        lock_acquire+0x120/0x360
[  215.919010][ T1088]        down_write+0x96/0x1f0
[  215.920400][ T1088]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  215.922198][ T1088]        nbd_start_device+0x16c/0xac0
[  215.923739][ T1088]        nbd_genl_connect+0x135b/0x18f0
[  215.925400][ T1088]        genl_family_rcv_msg_doit+0x215/0x300
[  215.927201][ T1088]        genl_rcv_msg+0x60e/0x790
[  215.928713][ T1088]        netlink_rcv_skb+0x208/0x470
[  215.930328][ T1088]        genl_rcv+0x28/0x40
[  215.931706][ T1088]        netlink_unicast+0x75c/0x8e0
[  215.933238][ T1088]        netlink_sendmsg+0x805/0xb30
[  215.934827][ T1088]        __sock_sendmsg+0x21c/0x270
[  215.936403][ T1088]        ____sys_sendmsg+0x505/0x830
[  215.937998][ T1088]        ___sys_sendmsg+0x21f/0x2a0
[  215.939549][ T1088]        __x64_sys_sendmsg+0x19b/0x260
[  215.941283][ T1088]        do_syscall_64+0xfa/0x3b0
[  215.942806][ T1088]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.944713][ T1088] 
[  215.944713][ T1088] -> #1 (&nbd->config_lock){+.+.}-{4:4}:
[  215.947059][ T1088]        lock_acquire+0x120/0x360
[  215.948559][ T1088]        __mutex_lock+0x182/0xe80
[  215.950103][ T1088]        refcount_dec_and_mutex_lock+0x30/0xa0
[  215.951981][ T1088]        nbd_config_put+0x2c/0x790
[  215.953528][ T1088]        nbd_release+0xfe/0x140
[  215.954942][ T1088]        bdev_release+0x536/0x650
[  215.956460][ T1088]        blkdev_release+0x15/0x20
[  215.957999][ T1088]        __fput+0x44c/0xa70
[  215.959405][ T1088]        fput_close_sync+0x119/0x200
[  215.960931][ T1088]        __x64_sys_close+0x7f/0x110
[  215.962465][ T1088]        do_syscall_64+0xfa/0x3b0
[  215.963954][ T1088]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  215.965828][ T1088] 
[  215.965828][ T1088] -> #0 (&disk->open_mutex){+.+.}-{4:4}:
[  215.968072][ T1088]        validate_chain+0xb9b/0x2140
[  215.969626][ T1088]        __lock_acquire+0xab9/0xd20
[  215.971165][ T1088]        lock_acquire+0x120/0x360
[  215.972670][ T1088]        __mutex_lock+0x182/0xe80
[  215.974253][ T1088]        __del_gendisk+0x129/0x9e0
[  215.975774][ T1088]        del_gendisk+0xe8/0x160
[  215.977205][ T1088]        nbd_dev_remove_work+0x47/0xe0
[  215.978838][ T1088]        process_scheduled_works+0xae1/0x17b0
[  215.980595][ T1088]        worker_thread+0x8a0/0xda0
[  215.982102][ T1088]        kthread+0x711/0x8a0
[  215.983500][ T1088]        ret_from_fork+0x3fc/0x770
[  215.984976][ T1088]        ret_from_fork_asm+0x1a/0x30
[  215.986522][ T1088] 
[  215.986522][ T1088] other info that might help us debug this:
[  215.986522][ T1088] 
[  215.989495][ T1088] Chain exists of:
[  215.989495][ T1088]   &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock
[  215.989495][ T1088] 
[  215.993583][ T1088]  Possible unsafe locking scenario:
[  215.993583][ T1088] 
[  215.995727][ T1088]        CPU0                    CPU1
[  215.997351][ T1088]        ----                    ----
[  215.998910][ T1088]   rlock(&set->update_nr_hwq_lock);
[  216.000486][ T1088]                                lock(&nbd->config_lock);
[  216.002620][ T1088]                                lock(&set->update_nr_hwq_lock);
[  216.004922][ T1088]   lock(&disk->open_mutex);
[  216.006334][ T1088] 
[  216.006334][ T1088]  *** DEADLOCK ***
[  216.006334][ T1088] 
[  216.008743][ T1088] 3 locks held by kworker/u9:6/1088:
[  216.010350][ T1088]  #0: ffff888022b48148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  216.013658][ T1088]  #1: ffffc90007287bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  216.017331][ T1088]  #2: ffff888022b4f188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160
[  216.020316][ T1088] 
[  216.020316][ T1088] stack backtrace:
[  216.022050][ T1088] CPU: 0 UID: 0 PID: 1088 Comm: kworker/u9:6 Not tainted 6.16.0-rc6-syzkaller-00128-g81e0db8e8398-dirty #0 PREEMPT(full) 
[  216.022061][ T1088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.022069][ T1088] Workqueue: nbd-del nbd_dev_remove_work
[  216.022082][ T1088] Call Trace:
[  216.022088][ T1088]  <TASK>
[  216.022094][ T1088]  dump_stack_lvl+0x189/0x250
[  216.022106][ T1088]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.022115][ T1088]  ? __pfx__printk+0x10/0x10
[  216.022126][ T1088]  ? print_lock_name+0xde/0x100
[  216.022136][ T1088]  print_circular_bug+0x2ee/0x310
[  216.022148][ T1088]  check_noncircular+0x134/0x160
[  216.022159][ T1088]  validate_chain+0xb9b/0x2140
[  216.022169][ T1088]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  216.022181][ T1088]  ? arch_stack_walk+0x11c/0x150
[  216.022193][ T1088]  __lock_acquire+0xab9/0xd20
[  216.022202][ T1088]  ? __del_gendisk+0x129/0x9e0
[  216.022211][ T1088]  lock_acquire+0x120/0x360
[  216.022219][ T1088]  ? __del_gendisk+0x129/0x9e0
[  216.022228][ T1088]  ? check_path+0x21/0x40
[  216.022238][ T1088]  __mutex_lock+0x182/0xe80
[  216.022255][ T1088]  ? __del_gendisk+0x129/0x9e0
[  216.022265][ T1088]  ? __del_gendisk+0x129/0x9e0
[  216.022274][ T1088]  ? __pfx___mutex_lock+0x10/0x10
[  216.022281][ T1088]  ? __pfx___might_resched+0x10/0x10
[  216.022314][ T1088]  ? __lock_acquire+0xab9/0xd20
[  216.022323][ T1088]  ? disk_del_events+0xb5/0x210
[  216.022333][ T1088]  ? __del_gendisk+0xc1/0x9e0
[  216.022342][ T1088]  __del_gendisk+0x129/0x9e0
[  216.022351][ T1088]  ? del_gendisk+0xe0/0x160
[  216.022361][ T1088]  ? __pfx___del_gendisk+0x10/0x10
[  216.022371][ T1088]  ? down_read+0x1ad/0x2e0
[  216.022379][ T1088]  del_gendisk+0xe8/0x160
[  216.022388][ T1088]  nbd_dev_remove_work+0x47/0xe0
[  216.022398][ T1088]  ? process_scheduled_works+0x9ef/0x17b0
[  216.022407][ T1088]  process_scheduled_works+0xae1/0x17b0
[  216.022420][ T1088]  ? __pfx_process_scheduled_works+0x10/0x10
[  216.022431][ T1088]  worker_thread+0x8a0/0xda0
[  216.022444][ T1088]  kthread+0x711/0x8a0
[  216.022455][ T1088]  ? __pfx_worker_thread+0x10/0x10
[  216.022463][ T1088]  ? __pfx_kthread+0x10/0x10
[  216.022473][ T1088]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.022485][ T1088]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.022493][ T1088]  ? __pfx_kthread+0x10/0x10
[  216.022502][ T1088]  ret_from_fork+0x3fc/0x770
[  216.022511][ T1088]  ? __pfx_ret_from_fork+0x10/0x10
[  216.022520][ T1088]  ? __switch_to_asm+0x39/0x70
[  216.022528][ T1088]  ? __switch_to_asm+0x33/0x70
[  216.022537][ T1088]  ? __pfx_kthread+0x10/0x10
[  216.022546][ T1088]  ret_from_fork_asm+0x1a/0x30
[  216.022558][ T1088]  </TASK>

VM DIAGNOSIS:
12:55:03  Registers:
info registers vcpu 0

CPU#0
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99df6590 RSP=ffffc90007286db0
R8 =ffff888021b78237 R9 =1ffff1100436f046 R10=dffffc0000000000 R11=ffffffff85461c50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85461cc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1157f69fc8 CR3=00000000289c2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffffffff000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=ffffffffffffffff ffffffffffffffff XMM03=ffffffffffffffff ffffffffffffffff
XMM04=00007fc2fc0ed100 00007fc2fb586440 XMM05=00007fc2fb586458 00007fc2fb5864a0
XMM06=00007fc2fb586498 00007fc2fb586490 XMM07=00007fc2fb586488 00007fc2fb586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fc2fb411ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4bec0 RBX=ffff88813663b1c0 RCX=ffff8881054d0000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000175f800 RSP=ffffc9000175f6a0
R8 =ffffffff8fa1d6f7 R9 =1ffffffff1f43ade R10=dffffc0000000000 R11=fffffbfff1f43adf
R12=1ffff11009608385 R13=dffffc0000000000 R14=0000000000000000 R15=ffff88804b041c28
RIP=ffffffff81b4bea9 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000558cf7991000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff818d24f0 ffffffff81686f4f
XMM02=00007f1157386478 ffffffff81686f4f XMM03=00007f1157386488 00007f1157386480
XMM04=00007f1157eed100 00007f1157386440 XMM05=00007f1157386458 00007f11573864a0
XMM06=00007f1157386498 00007f1157386490 XMM07=00007f1157386488 00007f1157386480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007f1157211ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
